ysk-server-core 1.0.0

package/dist/hosting/service-console.js

@@ -0,0 +1,480 @@
+import { tl, } from 'ysk-server-shared';
+import { panelBlockMessage } from './system-apply.js';
+import { catalogForEngine, CATEGORY_META, resolveCategoryMeta } from './service-catalog/index.js';
+import { installSoftware } from './software-install.js';
+import { HostSoftwareProbe, binPresent } from './software-probe/index.js';
+const ENGINE_META = {
+    mysql: { title: 'MySQL', unit: 'mysql', installIds: ['mysql-server', 'mysql-client'] },
+    mariadb: { title: 'MariaDB', unit: 'mariadb', installIds: ['mariadb-server', 'mysql-client'] },
+    postgres: { title: 'PostgreSQL', unit: 'postgresql', installIds: ['postgresql', 'postgresql-client'] },
+    redis: { title: 'Redis', unit: 'redis-server', installIds: ['redis-server', 'redis-tools'] }
+};
+function activeLabel(active, installed) {
+    if (!installed || active === 'not_installed')
+        return tl('notes.notInstalled');
+    if (active === 'active')
+        return tl('notes.running');
+    if (active === 'inactive' || active === 'failed')
+        return tl('notes.stopped');
+    if (active === 'activating')
+        return tl('notes.auto.n0014');
+    return active || tl('notes.unknown');
+}
+async function unitState(host, unit) {
+    if (!host.pathExists('/bin/systemctl') && !host.pathExists('/usr/bin/systemctl')) {
+        return { active: 'unknown', enabled: 'unknown' };
+    }
+    const a = await host.runCommand(['systemctl', 'is-active', unit], { timeoutMs: 5_000 });
+    const e = await host.runCommand(['systemctl', 'is-enabled', unit], { timeoutMs: 5_000 });
+    return {
+        active: (a.stdout || a.stderr || 'unknown').trim().split('\n')[0] || 'unknown',
+        enabled: (e.stdout || e.stderr || 'unknown').trim().split('\n')[0] || 'unknown'
+    };
+}
+async function loadMysqlLive(host, engine) {
+    const live = {};
+    const metrics = {};
+    if (!(await binPresent(host, 'mysql')))
+        return { live, metrics };
+    const ver = await host.runCommand(['mysql', '--version'], { timeoutMs: 5_000 });
+    const version = ver.stdout.trim();
+    const vars = await host.runCommand(['mysql', '-N', '-e', "SHOW GLOBAL VARIABLES WHERE Variable_name IN ('port','bind_address','max_connections','max_connect_errors','wait_timeout','interactive_timeout','innodb_buffer_pool_size','innodb_log_file_size','innodb_flush_log_at_trx_commit','tmp_table_size','max_heap_table_size','table_open_cache','character_set_server','collation_server','slow_query_log','long_query_time','log_error','general_log','log_bin','binlog_format','binlog_expire_logs_seconds','expire_logs_days','require_secure_transport','default_authentication_plugin','skip_name_resolve','thread_handling')"], { timeoutMs: 15_000 });
+    for (const line of vars.stdout.split('\n')) {
+        const parts = line.trim().split(/\t/);
+        if (parts.length >= 2)
+            live[parts[0]] = parts.slice(1).join('\t');
+    }
+    const st = await host.runCommand(['mysql', '-N', '-e', "SHOW GLOBAL STATUS WHERE Variable_name IN ('Threads_connected','Uptime','Questions')"], { timeoutMs: 10_000 });
+    for (const line of st.stdout.split('\n')) {
+        const parts = line.trim().split(/\t/);
+        if (parts.length >= 2)
+            metrics[parts[0]] = parts[1];
+    }
+    void engine;
+    return { version, live, metrics };
+}
+async function loadPostgresLive(host) {
+    const live = {};
+    const metrics = {};
+    if (!(await binPresent(host, 'psql')))
+        return { live, metrics };
+    const ver = await host.runCommand(['psql', '--version'], { timeoutMs: 5_000 });
+    const version = ver.stdout.trim();
+    const keys = [
+        'port',
+        'listen_addresses',
+        'max_connections',
+        'password_encryption',
+        'shared_buffers',
+        'work_mem',
+        'maintenance_work_mem',
+        'effective_cache_size',
+        'wal_level',
+        'max_wal_size',
+        'checkpoint_timeout',
+        'archive_mode',
+        'logging_collector',
+        'log_min_duration_statement',
+        'log_statement',
+        'autovacuum',
+        'autovacuum_max_workers',
+        'ssl',
+    ];
+    for (const k of keys) {
+        const r = await host.runCommand(['psql', '-t', '-A', '-c', `SHOW ${k};`], { timeoutMs: 5_000 });
+        if (r.exitCode === 0 && r.stdout.trim())
+            live[k] = r.stdout.trim();
+    }
+    return { version, live, metrics };
+}
+async function loadRedisLive(host) {
+    const live = {};
+    const metrics = {};
+    if (!(await binPresent(host, 'redis-cli')))
+        return { live, metrics };
+    const ping = await host.runCommand(['redis-cli', 'PING'], { timeoutMs: 5_000 });
+    if (ping.stdout.trim().toUpperCase() !== 'PONG')
+        return { live, metrics };
+    const info = await host.runCommand(['redis-cli', 'INFO', 'server'], { timeoutMs: 5_000 });
+    const vm = info.stdout.match(/redis_version:(.+)/);
+    const version = vm ? `Redis ${vm[1].trim()}` : undefined;
+    const keys = [
+        'port',
+        'bind',
+        'protected-mode',
+        'tcp-keepalive',
+        'timeout',
+        'databases',
+        'maxclients',
+        'maxmemory',
+        'maxmemory-policy',
+        'appendonly',
+        'appendfsync',
+        'save',
+        'dir',
+        'dbfilename',
+        'requirepass',
+        'loglevel',
+        'logfile',
+    ];
+    for (const k of keys) {
+        const r = await host.runCommand(['redis-cli', 'CONFIG', 'GET', k], { timeoutMs: 5_000 });
+        const lines = r.stdout.trim().split('\n');
+        if (lines.length >= 2)
+            live[k] = lines[lines.length - 1];
+    }
+    const mem = await host.runCommand(['redis-cli', 'INFO', 'memory'], { timeoutMs: 5_000 });
+    const um = mem.stdout.match(/used_memory_human:(.+)/);
+    if (um)
+        metrics.used_memory = um[1].trim();
+    const cl = await host.runCommand(['redis-cli', 'INFO', 'clients'], { timeoutMs: 5_000 });
+    const cc = cl.stdout.match(/connected_clients:(.+)/);
+    if (cc)
+        metrics.connected_clients = cc[1].trim();
+    return { version, live, metrics };
+}
+export async function getServiceConsole(host, engine, _db) {
+    const meta = ENGINE_META[engine];
+    // Unified presence (mysql vs mariadb exclusive) — same standard as db-engine / software catalog
+    const probe = new HostSoftwareProbe(host);
+    const { server } = await probe.presenceForEngine(engine);
+    const installed = server.installed;
+    const verInfo = await probe.version(engine === 'mysql'
+        ? 'mysql-server'
+        : engine === 'mariadb'
+            ? 'mariadb-server'
+            : engine === 'postgres'
+                ? 'postgresql'
+                : 'redis-server');
+    let { active, enabled } = await unitState(host, meta.unit);
+    if (engine === 'mysql' && active !== 'active' && installed) {
+        const alt = await unitState(host, 'mysqld');
+        if (alt.active === 'active') {
+            active = alt.active;
+            enabled = alt.enabled;
+        }
+    }
+    // Prefer unit state from presence when available
+    if (server.units?.[0]?.active) {
+        active = server.units[0].active ?? active;
+        enabled = server.units[0].enabled ?? enabled;
+    }
+    if (!installed)
+        active = 'not_installed';
+    let version = verInfo.version;
+    let live = {};
+    let metrics = {};
+    if (installed && (engine === 'mysql' || engine === 'mariadb')) {
+        const r = await loadMysqlLive(host, engine);
+        version = r.version || version;
+        live = r.live;
+        metrics = r.metrics;
+    }
+    else if (installed && engine === 'postgres') {
+        const r = await loadPostgresLive(host);
+        version = r.version || version;
+        live = r.live;
+        metrics = r.metrics;
+    }
+    else if (installed && engine === 'redis') {
+        const r = await loadRedisLive(host);
+        version = r.version || version;
+        live = r.live;
+        metrics = r.metrics;
+    }
+    const defs = catalogForEngine(engine, version);
+    const byCat = new Map();
+    for (const d of defs) {
+        const row = {
+            ...d,
+            liveValue: live[d.key] ?? live[d.confKey ?? ''] ?? undefined,
+            supported: true
+        };
+        const list = byCat.get(d.category) ?? [];
+        list.push(row);
+        byCat.set(d.category, list);
+    }
+    // Advanced: extra live keys not in catalog
+    const known = new Set(defs.map((d) => d.key));
+    const extra = [];
+    for (const [k, v] of Object.entries(live)) {
+        if (known.has(k))
+            continue;
+        extra.push({
+            key: k,
+            label: k,
+            category: 'advanced',
+            type: 'string',
+            applyMode: engine === 'postgres' ? 'reload' : 'runtime',
+            liveValue: v,
+            supported: true,
+            advanced: true
+        });
+    }
+    if (extra.length) {
+        byCat.set('advanced', [...(byCat.get('advanced') ?? []), ...extra.slice(0, 80)]);
+    }
+    const categories = Object.entries(CATEGORY_META)
+        .sort((a, b) => a[1].order - b[1].order)
+        .filter(([id]) => id !== 'overview' && id !== 'lifecycle')
+        .map(([id]) => {
+        const m = resolveCategoryMeta(id);
+        return {
+            id: id,
+            label: m.label,
+            description: m.description,
+            settings: byCat.get(id) ?? [],
+        };
+    })
+        .filter((c) => c.settings.length > 0);
+    const executeEnabled = host.executeEnabled();
+    const isRoot = host.isRoot();
+    const canLifecycle = executeEnabled && isRoot && installed;
+    let blockMessage;
+    if (!installed && server.blockedByExclusive) {
+        const other = server.blockedByExclusive === 'mariadb-server'
+            ? 'MariaDB'
+            : server.blockedByExclusive === 'mysql-server'
+                ? 'MySQL'
+                : server.blockedByExclusive;
+        blockMessage = tl('notes.auto.t0308', { v0: meta.title }) + ` (${other})`;
+    }
+    else if (!installed)
+        blockMessage = tl('notes.auto.t0308', { v0: meta.title });
+    else if (!executeEnabled)
+        blockMessage = tl('notes.auto.n0613');
+    else if (!isRoot)
+        blockMessage = tl('notes.auto.n1583');
+    return {
+        engine,
+        title: meta.title,
+        version,
+        unit: meta.unit,
+        active,
+        activeLabel: activeLabel(active, installed),
+        enabled,
+        installed,
+        executeEnabled,
+        isRoot,
+        canLifecycle,
+        blockMessage,
+        blockedByExclusive: server.blockedByExclusive,
+        metrics,
+        categories,
+        live
+    };
+}
+export async function lifecycleService(host, engine, action) {
+    const meta = ENGINE_META[engine];
+    if (!host.executeEnabled() || !host.isRoot()) {
+        const reason = !host.executeEnabled() ? 'no_execute' : 'no_root';
+        const blockMessage = panelBlockMessage(reason);
+        return { ok: false, blocked: true, blockMessage, notes: [blockMessage] };
+    }
+    const map = {
+        start: ['systemctl', 'start', meta.unit],
+        stop: ['systemctl', 'stop', meta.unit],
+        restart: ['systemctl', 'restart', meta.unit],
+        reload: ['systemctl', 'reload', meta.unit],
+        enable: ['systemctl', 'enable', meta.unit],
+        disable: ['systemctl', 'disable', meta.unit]
+    };
+    const argv = map[action];
+    let r = await host.runCommand(argv, { timeoutMs: 120_000 });
+    // Redis/MySQL may not support reload
+    if (r.exitCode !== 0 && action === 'reload') {
+        const r2 = await host.runCommand(['systemctl', 'restart', meta.unit], { timeoutMs: 120_000 });
+        return {
+            ok: r2.exitCode === 0,
+            notes: r2.exitCode === 0 ? [tl('notes.auto.n0807')] : [tl('notes.tpl.failedDetail', { detail: r2.stderr || r.stderr })]
+        };
+    }
+    // MySQL/MariaDB start: FROZEN recovery when unit still down after start
+    if ((action === 'start' || action === 'restart') &&
+        (engine === 'mysql' || engine === 'mariadb') &&
+        r.exitCode !== 0) {
+        try {
+            const { recoverMysqlAfterEngineSwitch, frozenUnitFailureHint } = await import('./sql-engine-switch/mysql-frozen.js');
+            const notes = [];
+            const frozenHint = await frozenUnitFailureHint(host, meta.unit);
+            if (frozenHint)
+                notes.push(frozenHint);
+            const rec = await recoverMysqlAfterEngineSwitch(host, engine);
+            notes.push(...rec.notes);
+            r = await host.runCommand(['systemctl', 'start', meta.unit], { timeoutMs: 120_000 });
+            if (r.exitCode === 0) {
+                return { ok: true, notes: [...notes, tl('notes.auto.t0309', { v0: action })] };
+            }
+            return {
+                ok: false,
+                notes: [
+                    ...notes,
+                    tl('notes.tpl.failedDetail', { detail: r.stderr || r.stdout || meta.unit }),
+                ],
+            };
+        }
+        catch {
+            /* fall through */
+        }
+    }
+    return {
+        ok: r.exitCode === 0,
+        notes: r.exitCode === 0 ? [tl('notes.auto.t0309', { v0: (action) })] : [tl('notes.tpl.failedDetail', { detail: r.stderr || r.stdout })]
+    };
+}
+export async function applyConsoleSettings(input) {
+    const { host, engine, changes } = input;
+    const applied = [];
+    const needsRestart = [];
+    const notes = [];
+    const defs = catalogForEngine(engine);
+    const byKey = new Map(defs.map((d) => [d.key, d]));
+    if (engine === 'redis') {
+        if (!(await binPresent(host, 'redis-cli'))) {
+            return {
+                ok: false,
+                notes: [tl('notes.redis.cliMissing')],
+                applied,
+                needsRestart,
+                blocked: true,
+                blockMessage: tl('notes.redis.cliMissing')
+            };
+        }
+        for (const [k, v] of Object.entries(changes)) {
+            if (!/^[a-zA-Z0-9_.-]+$/.test(k) || !byKey.has(k)) {
+                notes.push(`${k}: rejected (not in catalog)`);
+                continue;
+            }
+            const def = byKey.get(k);
+            if (def?.applyMode === 'restart') {
+                needsRestart.push(k);
+                // still try CONFIG SET for redis many work at runtime
+            }
+            const r = await host.runCommand(['redis-cli', 'CONFIG', 'SET', k, v], { timeoutMs: 10_000 });
+            if (r.exitCode === 0 && r.stdout.trim().toUpperCase() === 'OK') {
+                applied.push(k);
+            }
+            else {
+                notes.push(`${k}: ${r.stderr || r.stdout || tl('notes.failed')}`);
+                if (def?.applyMode === 'restart')
+                    needsRestart.push(k);
+            }
+        }
+        if (applied.length) {
+            await host.runCommand(['redis-cli', 'CONFIG', 'REWRITE'], { timeoutMs: 10_000 });
+            notes.push(tl('notes.auto.t0310', { v0: (applied.length) }));
+        }
+        if (needsRestart.length && host.executeEnabled() && host.isRoot()) {
+            await host.runCommand(['systemctl', 'restart', 'redis-server'], { timeoutMs: 60_000 });
+            notes.push(tl('notes.auto.n0806'));
+        }
+        else if (needsRestart.length) {
+            notes.push(tl('notes.auto.t0311', { v0: ([...new Set(needsRestart)].join(', ')) }));
+        }
+        return { ok: applied.length > 0 || needsRestart.length === 0, notes, applied, needsRestart };
+    }
+    if (engine === 'mysql' || engine === 'mariadb') {
+        if (!(await binPresent(host, 'mysql'))) {
+            return {
+                ok: false,
+                notes: [tl('notes.auto.n0015')],
+                applied,
+                needsRestart,
+                blocked: true,
+                blockMessage: tl('notes.auto.n0015')
+            };
+        }
+        for (const [k, v] of Object.entries(changes)) {
+            if (!/^[a-zA-Z0-9_.]+$/.test(k) || !byKey.has(k)) {
+                notes.push(`${k}: rejected (not in catalog)`);
+                continue;
+            }
+            const def = byKey.get(k);
+            if (def.applyMode === 'restart') {
+                needsRestart.push(k);
+                continue;
+            }
+            const esc = v.replace(/\\/g, '\\\\').replace(/'/g, "\\'");
+            const r = await host.runCommand(['mysql', '-e', `SET GLOBAL ${k} = '${esc}';`], { timeoutMs: 10_000 });
+            if (r.exitCode === 0)
+                applied.push(k);
+            else
+                notes.push(`${k}: ${r.stderr || tl('notes.failed')}`);
+        }
+        notes.push(tl('notes.auto.t0312', { v0: (applied.length) }));
+        if (needsRestart.length) {
+            notes.push(tl('notes.auto.t0313', { v0: ([...new Set(needsRestart)].join(', ')) }));
+        }
+        return { ok: true, notes, applied, needsRestart: [...new Set(needsRestart)] };
+    }
+    // postgres
+    if (!(await binPresent(host, 'psql'))) {
+        return {
+            ok: false,
+            notes: [tl('notes.auto.n0016')],
+            applied,
+            needsRestart,
+            blocked: true,
+            blockMessage: tl('notes.auto.n0016')
+        };
+    }
+    for (const [k, v] of Object.entries(changes)) {
+        if (!/^[a-zA-Z0-9_.]+$/.test(k) || !byKey.has(k)) {
+            notes.push(`${k}: rejected (not in catalog)`);
+            continue;
+        }
+        const def = byKey.get(k);
+        const esc = v.replace(/'/g, "''");
+        const r = await host.runCommand(['psql', '-c', `ALTER SYSTEM SET ${k} = '${esc}';`], { timeoutMs: 10_000 });
+        if (r.exitCode === 0) {
+            applied.push(k);
+            if (def?.applyMode === 'restart')
+                needsRestart.push(k);
+        }
+        else
+            notes.push(`${k}: ${r.stderr || tl('notes.failed')}`);
+    }
+    if (applied.length) {
+        await host.runCommand(['psql', '-c', 'SELECT pg_reload_conf();'], { timeoutMs: 10_000 });
+        notes.push(tl('notes.auto.t0314', { v0: (applied.length) }));
+    }
+    if (needsRestart.length) {
+        notes.push(tl('notes.auto.t0315', { v0: ([...new Set(needsRestart)].join(', ')) }));
+    }
+    return { ok: applied.length > 0, notes, applied, needsRestart: [...new Set(needsRestart)] };
+}
+export async function installServiceEngine(host, engine, dataDir) {
+    const ids = ENGINE_META[engine].installIds;
+    const notes = [];
+    let blocked = false;
+    let blockMessage;
+    let allOk = true;
+    let code;
+    let switchTarget;
+    let blockedByExclusive;
+    for (const id of ids) {
+        const r = await installSoftware({ host, id, dataDir, enableUnits: true });
+        notes.push(...r.notes);
+        if (r.blocked) {
+            blocked = true;
+            blockMessage = r.blockMessage;
+        }
+        if (!r.ok)
+            allOk = false;
+        if (r.code === 'needs_exclusive_switch') {
+            code = r.code;
+            switchTarget = r.switchTarget;
+            blockedByExclusive = r.blockedByExclusive;
+        }
+    }
+    return {
+        ok: allOk && !blocked,
+        notes,
+        blocked,
+        blockMessage,
+        code,
+        switchTarget,
+        blockedByExclusive,
+    };
+}
+//# sourceMappingURL=service-console.js.map

package/dist/hosting/service-console.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-console.js","sourceRoot":"","sources":["../../src/hosting/service-console.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,EAAE,GAGH,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAAE,iBAAiB,EAAoB,MAAM,mBAAmB,CAAC;AACxE,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,mBAAmB,EAGF,MAAM,4BAA4B,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAqB1E,MAAM,WAAW,GAGb;IACF,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE;IACtF,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE;IAC9F,QAAQ,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC,EAAE;IACtG,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,EAAE;CAAE,CAAC;AAEjG,SAAS,WAAW,CAAC,MAAc,EAAE,SAAkB;IACrD,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,eAAe;QAAE,OAAO,EAAE,CAAC,oBAAoB,CAAC,CAAC;IAC9E,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IAC7E,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC;IAC3D,OAAO,MAAM,IAAI,EAAE,CAAC,eAAe,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAkB,EAAE,IAAY;IACvD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS;QAC9E,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS;KAAE,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAkB,EAClB,MAA2B;IAE3B,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAChC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,gjBAAgjB,CAAC,EACvkB,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAC9B,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,sFAAsF,CAAC,EAC7G,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAkB;IAElB,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG;QACX,MAAM;QACN,kBAAkB;QAClB,iBAAiB;QACjB,qBAAqB;QACrB,gBAAgB;QAChB,UAAU;QACV,sBAAsB;QACtB,sBAAsB;QACtB,WAAW;QACX,cAAc;QACd,oBAAoB;QACpB,cAAc;QACd,mBAAmB;QACnB,4BAA4B;QAC5B,eAAe;QACf,YAAY;QACZ,wBAAwB;QACxB,KAAK;KACN,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,EACxC,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACF,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAkB;IAElB,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,MAAM,IAAI,GAAG;QACX,MAAM;QACN,MAAM;QACN,gBAAgB;QAChB,eAAe;QACf,SAAS;QACT,WAAW;QACX,YAAY;QACZ,WAAW;QACX,kBAAkB;QAClB,YAAY;QACZ,aAAa;QACb,MAAM;QACN,KAAK;QACL,YAAY;QACZ,aAAa;QACb,UAAU;QACV,SAAS;KACV,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACtD,IAAI,EAAE;QAAE,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACrD,IAAI,EAAE;QAAE,OAAO,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAkB,EAClB,MAAqB,EACrB,GAAe;IAEf,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,gGAAgG;IAChG,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CACjC,MAAM,KAAK,OAAO;QAChB,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,MAAM,KAAK,SAAS;YACpB,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,MAAM,KAAK,UAAU;gBACrB,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,cAAc,CACvB,CAAC;IAEF,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACpB,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QACxB,CAAC;IACH,CAAC;IACD,iDAAiD;IACjD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC;QAC1C,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,MAAM,GAAG,eAAe,CAAC;IAEzC,IAAI,OAAO,GAAuB,OAAO,CAAC,OAAO,CAAC;IAClD,IAAI,IAAI,GAA2B,EAAE,CAAC;IACtC,IAAI,OAAO,GAA2B,EAAE,CAAC;IAEzC,IAAI,SAAS,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC;QAC/B,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACd,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IACtB,CAAC;SAAM,IAAI,SAAS,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC;QAC/B,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACd,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IACtB,CAAC;SAAM,IAAI,SAAS,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC;QAC/B,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACd,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0C,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,GAAG,GAAsB;YAC7B,GAAG,CAAC;YACJ,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,SAAS;YAC5D,SAAS,EAAE,IAAI;SAAE,CAAC;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,2CAA2C;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC3B,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,EAAE,CAAC;YACN,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,UAAU;YACpB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACvD,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,IAAI;SAAE,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,UAAU,GAAsB,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;SAChE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;SACvC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,UAAU,IAAI,EAAE,KAAK,WAAW,CAAC;SACzD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACZ,MAAM,CAAC,GAAG,mBAAmB,CAAC,EAAuB,CAAC,CAAC;QACvD,OAAO;YACL,EAAE,EAAE,EAAuB;YAC3B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,EAAuB,CAAC,IAAI,EAAE;SACnD,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAExC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,cAAc,IAAI,MAAM,IAAI,SAAS,CAAC;IAC3D,IAAI,YAAgC,CAAC;IACrC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC5C,MAAM,KAAK,GACT,MAAM,CAAC,kBAAkB,KAAK,gBAAgB;YAC5C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,kBAAkB,KAAK,cAAc;gBAC5C,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAClC,YAAY,GAAG,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,KAAK,KAAK,GAAG,CAAC;IAC5E,CAAC;SAAM,IAAI,CAAC,SAAS;QAAE,YAAY,GAAG,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;SAC5E,IAAI,CAAC,cAAc;QAAE,YAAY,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC;SAC3D,IAAI,CAAC,MAAM;QAAE,YAAY,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC;IAExD,OAAO;QACL,MAAM;QACN,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM;QACN,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC;QAC3C,OAAO;QACP,SAAS;QACT,cAAc;QACd,MAAM;QACN,YAAY;QACZ,YAAY;QACZ,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,OAAO;QACP,UAAU;QACV,IAAI;KAAE,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAkB,EAClB,MAAqB,EACrB,MAAuB;IAEvB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAgB,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,GAAG,GAAsC;QAC7C,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;QACxC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;QACtC,OAAO,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC;QAC5C,MAAM,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC;QAC1C,MAAM,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC;QAC1C,OAAO,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC;KAAE,CAAC;IACjD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5D,qCAAqC;IACrC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9F,OAAO;YACL,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC;YACrB,KAAK,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;SAAE,CAAC;IAC9H,CAAC;IAED,wEAAwE;IACxE,IACE,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,CAAC;QAC5C,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,CAAC;QAC5C,CAAC,CAAC,QAAQ,KAAK,CAAC,EAChB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAC3E,qCAAqC,CACtC,CAAC;YACF,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAChE,IAAI,UAAU;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9D,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YACrF,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACjF,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,GAAG,KAAK;oBACR,EAAE,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC5E;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KAAE,CAAC;AAC9I,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAI1C;IAQC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;YAC3C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC;gBACrC,OAAO;gBACP,YAAY;gBACZ,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,EAAE,CAAC,wBAAwB,CAAC;aAAE,CAAC;QACjD,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,GAAG,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;gBACjC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACrB,sDAAsD;YACxD,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7F,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;gBAClE,IAAI,GAAG,EAAE,SAAS,KAAK,SAAS;oBAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACjF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACvF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC/F,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;gBAC/B,OAAO;gBACP,YAAY;gBACZ,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC;aAAE,CAAC;QAC3C,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;YAC1B,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAChC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,GAAG,IAAI,CAAC,EAC9C,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;YACF,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;gBACjC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;IAChF,CAAC;IAED,WAAW;IACX,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,OAAO;YACP,YAAY;YACZ,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC;SAAE,CAAC;IAC3C,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B,CAAC,MAAM,EAAE,IAAI,EAAE,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC,EACnD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;QACF,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,GAAG,EAAE,SAAS,KAAK,SAAS;gBAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;;YAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,0BAA0B,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAkB,EAClB,MAAqB,EACrB,OAAgB;IAUhB,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,YAAgC,CAAC;IACrC,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,IAAI,IAAwB,CAAC;IAC7B,IAAI,YAA6C,CAAC;IAClD,IAAI,kBAAsC,CAAC;IAC3C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,KAAK,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YACxC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;YACd,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;YAC9B,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK,IAAI,CAAC,OAAO;QACrB,KAAK;QACL,OAAO;QACP,YAAY;QACZ,IAAI;QACJ,YAAY;QACZ,kBAAkB;KACnB,CAAC;AACJ,CAAC"}

package/dist/hosting/service-exposure/geo-countries.d.ts

@@ -0,0 +1,51 @@
+/**
+ * L2: country allowlist for service exposure (ipset best-effort).
+ * Zone files: dataDir/geoip/country-zones/{cc}.zone (ipdeny-style one CIDR per line).
+ */
+import type { HostExecutor } from '../../host/executor.js';
+export declare function normalizeCountries(list: unknown): string[];
+export declare function countryZonesDir(dataDir: string): string;
+export declare function countryZonePath(dataDir: string, cc: string): string;
+/** Read CIDRs from a zone file (skip comments/empty). */
+export declare function readCountryZoneCidrs(dataDir: string, cc: string): string[];
+/**
+ * Best-effort download of a country zone (ipdeny aggregate).
+ * Fail-soft: returns notes, never throws.
+ */
+export declare function ensureCountryZoneFile(dataDir: string, cc: string, fetchImpl?: typeof fetch): Promise<{
+    ok: boolean;
+    path?: string;
+    notes: string[];
+    cidrCount: number;
+}>;
+export declare function ipsetNameForService(serviceId: string): string;
+/**
+ * Rebuild ipset for service country allowlist and install INPUT accept for listed ports.
+ * Best-effort: requires root + EXECUTE + ipset binary.
+ */
+export declare function applyCountryIpsetAllow(input: {
+    host: HostExecutor;
+    dataDir: string;
+    serviceId: string;
+    countries: string[];
+    /** e.g. [{ port: '80', proto: 'tcp' }, ...] */
+    ports: Array<{
+        port: string;
+        proto: 'tcp' | 'udp';
+    }>;
+    /** download missing zones */
+    fetchZones?: boolean;
+}): Promise<{
+    ok: boolean;
+    notes: string[];
+    blocked?: boolean;
+    setName?: string;
+}>;
+/** Destroy ipset + try remove iptables comments for service. */
+export declare function clearCountryIpset(input: {
+    host: HostExecutor;
+    serviceId: string;
+}): Promise<{
+    notes: string[];
+}>;
+//# sourceMappingURL=geo-countries.d.ts.map

package/dist/hosting/service-exposure/geo-countries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"geo-countries.d.ts","sourceRoot":"","sources":["../../../src/hosting/service-exposure/geo-countries.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAO3D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CAc1D;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,yDAAyD;AACzD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAkB1E;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,EACV,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAuD7E;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,+CAA+C;IAC/C,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAA;KAAE,CAAC,CAAC;IACrD,6BAA6B;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA4GjF;AAED,gEAAgE;AAChE,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAyB/B"}