ysk-server-core 1.0.0

package/dist/hosting/dns-cluster.js

@@ -0,0 +1,532 @@
+import { tl } from 'ysk-server-shared';
+import { existsSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { shellBinExists } from './software-probe/index.js';
+const KEY = 'dns_cluster_peers';
+export function listDnsClusterPeers(db) {
+    try {
+        return JSON.parse(db.snapshot.settings?.[KEY] ?? '[]');
+    }
+    catch {
+        return [];
+    }
+}
+function savePeers(db, peers) {
+    db.snapshot.settings[KEY] = JSON.stringify(peers.slice(0, 20));
+    db.persist();
+}
+export function upsertDnsClusterPeer(db, input) {
+    const all = listDnsClusterPeers(db);
+    const id = input.id ?? randomUUID();
+    const prev = all.find((p) => p.id === id);
+    const row = {
+        id,
+        host: input.host.trim(),
+        port: input.port ?? 22,
+        username: input.username.trim(),
+        path: input.path ?? '/var/lib/ysk/dns/zones',
+        label: input.label,
+        sshIdentityId: input.sshIdentityId ?? prev?.sshIdentityId,
+        createdAt: prev?.createdAt ?? new Date().toISOString(),
+        lastProbe: prev?.lastProbe
+    };
+    const next = [row, ...all.filter((p) => p.id !== id)];
+    savePeers(db, next);
+    return row;
+}
+export function deleteDnsClusterPeer(db, id) {
+    const all = listDnsClusterPeers(db);
+    const next = all.filter((p) => p.id !== id);
+    savePeers(db, next);
+    return next.length < all.length;
+}
+function updatePeerLastProbe(db, peerId, probe) {
+    const all = listDnsClusterPeers(db);
+    const next = all.map((p) => (p.id === peerId ? { ...p, lastProbe: probe } : p));
+    savePeers(db, next);
+}
+function sshArgv(peer, remoteCmd, identityPath) {
+    const base = ['ssh'];
+    if (identityPath) {
+        base.push('-i', identityPath, '-o', 'IdentitiesOnly=yes', '-o', 'BatchMode=yes', '-o', 'StrictHostKeyChecking=accept-new', '-o', 'ConnectTimeout=10');
+    }
+    else {
+        base.push('-o', 'StrictHostKeyChecking=no', '-o', 'BatchMode=yes', '-o', 'ConnectTimeout=10');
+    }
+    base.push('-p', String(peer.port), `${peer.username}@${peer.host}`, 'bash', '-lc', remoteCmd);
+    return base;
+}
+async function resolvePeerIdentity(dataDir, peer) {
+    if (!peer.sshIdentityId || !dataDir)
+        return undefined;
+    try {
+        const { resolveIdentityKeyPath } = await import('../security/ssh-identity/ops.js');
+        const r = resolveIdentityKeyPath(dataDir, peer.sshIdentityId);
+        return r.ok ? r.path : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function sshOnPeer(host, peer, remoteCmd, opts) {
+    const identityPath = await resolvePeerIdentity(opts?.dataDir, peer);
+    const argv = sshArgv(peer, remoteCmd, identityPath);
+    const r = await host.runCommand(argv, {
+        timeoutMs: opts?.timeoutMs ?? 30_000
+    });
+    return {
+        exitCode: r.exitCode,
+        stdout: r.stdout || '',
+        stderr: r.stderr || ''
+    };
+}
+/** Remote one-liner: detect active NS unit + zone dir. */
+const REMOTE_PROBE_SCRIPT = (zonePath) => [
+    'svc=none',
+    'for u in named bind9 pdns; do',
+    '  if systemctl is-active --quiet "$u" 2>/dev/null; then svc=$u; break; fi',
+    'done',
+    'echo ACTIVE:$svc',
+    `if [ -d ${JSON.stringify(zonePath)} ]; then echo ZONE_DIR:ok; else echo ZONE_DIR:missing; fi`,
+    `ls ${JSON.stringify(zonePath)}/*.zone 2>/dev/null | wc -l | awk '{print "ZONE_FILES:"$1}'`,
+].join('\n');
+/**
+ * Remote reload after zone files were scp'd into peer dataDir.
+ * For PowerDNS bindbackend: rewrite named include from peer dataDir zones + rediscover
+ * (plain systemctl reload pdns alone leaves dig REFUSED / 0 domains).
+ */
+// YSK_DATA_DIR / YSK_ZONE_DIR must be set by remoteReloadScriptForPeer(peer.path).
+// Fallback /var/lib/ysk-server is the **product install default** (any host), not a customer machine.
+const REMOTE_RELOAD_SCRIPT = [
+    'set -euo pipefail',
+    'DATA_DIR="${YSK_DATA_DIR:-/var/lib/ysk-server}"',
+    'ZDIR="${YSK_ZONE_DIR:-$DATA_DIR/dns/zones}"',
+    'CONF_DIR=/etc/powerdns',
+    'YSK_INC="$CONF_DIR/ysk-named-zones.conf"',
+    'RUNTIME=/var/lib/powerdns/zones',
+    '# If PowerDNS is active, register all managed .zone files before reload',
+    'if systemctl is-active --quiet pdns 2>/dev/null; then',
+    '  mkdir -p "$CONF_DIR" "$RUNTIME" "$CONF_DIR/pdns.d"',
+    '  : > "$YSK_INC"',
+    '  if [ -d "$ZDIR" ]; then',
+    '    for f in "$ZDIR"/*.zone; do',
+    '      [ -f "$f" ] || continue',
+    '      base=$(basename "$f" .zone)',
+    '      cp -f "$f" "$RUNTIME/$base.zone"',
+    '      chown pdns:pdns "$RUNTIME/$base.zone" 2>/dev/null || true',
+    '      chmod 640 "$RUNTIME/$base.zone" 2>/dev/null || true',
+    '      printf "zone \\"%s\\" {\\n  type master;\\n  file \\"%s/%s.zone\\";\\n};\\n\\n" "$base" "$RUNTIME" "$base" >> "$YSK_INC"',
+    '    done',
+    '  fi',
+    '  NAMED="$CONF_DIR/named.conf"',
+    '  if [ ! -f "$NAMED" ]; then',
+    '    printf "%s\\n" \'// YSK cluster\' \'options { directory "/var/lib/powerdns"; };\' "" > "$NAMED"',
+    '  fi',
+    '  if ! grep -qF ysk-named-zones.conf "$NAMED" 2>/dev/null; then',
+    '    printf "\\ninclude \\"%s\\";\\n" "$YSK_INC" >> "$NAMED"',
+    '  fi',
+    '  if [ -f "$CONF_DIR/pdns.conf" ] && ! grep -qE "^[[:space:]]*include-dir=" "$CONF_DIR/pdns.conf" 2>/dev/null; then',
+    '    echo "include-dir=$CONF_DIR/pdns.d" >> "$CONF_DIR/pdns.conf"',
+    '  fi',
+    '  echo "bind-config=/etc/powerdns/named.conf" > "$CONF_DIR/pdns.d/ysk-bind-backend.conf"',
+    '  if command -v pdns_control >/dev/null 2>&1; then',
+    '    pdns_control rediscover 2>/dev/null || true',
+    '    pdns_control reload 2>/dev/null || true',
+    '  fi',
+    '  systemctl reload pdns 2>/dev/null || true',
+    '  echo RELOAD_OK:pdns-bind-sync',
+    '  exit 0',
+    'fi',
+    `if ${shellBinExists('rndc')}; then`,
+    '  rndc reload && echo RELOAD_OK:rndc && exit 0',
+    '  echo RELOAD_FAIL:rndc; exit 1',
+    'fi',
+    'for u in named bind9; do',
+    '  if systemctl is-active --quiet "$u" 2>/dev/null; then',
+    '    systemctl reload "$u" && echo RELOAD_OK:$u && exit 0',
+    '    echo RELOAD_FAIL:$u; exit 1',
+    '  fi',
+    'done',
+    'echo RELOAD_NONE; exit 1',
+].join('\n');
+/** Prefix remote reload with peer zone path → dataDir guess. */
+export function remoteReloadScriptForPeer(peerZonePath) {
+    // peer.path is typically …/dns/zones — strip suffix to get dataDir
+    const p = peerZonePath.replace(/\/+$/, '');
+    const dataDir = p.endsWith('/dns/zones')
+        ? p.slice(0, -'/dns/zones'.length) || '/'
+        : p.includes('/dns/')
+            ? p.replace(/\/dns\/.*$/, '')
+            : p;
+    return `export YSK_DATA_DIR=${JSON.stringify(dataDir)}; export YSK_ZONE_DIR=${JSON.stringify(p)}; ${REMOTE_RELOAD_SCRIPT}`;
+}
+/**
+ * Probe one peer over SSH (nameserver unit + zone dir).
+ */
+export async function probeDnsClusterPeer(input) {
+    const t0 = Date.now();
+    const at = new Date().toISOString();
+    if (!input.host.executeEnabled()) {
+        return {
+            at,
+            ok: false,
+            notes: [tl('notes.auto.n1130')],
+            latencyMs: Date.now() - t0
+        };
+    }
+    const r = await sshOnPeer(input.host, input.peer, REMOTE_PROBE_SCRIPT(input.peer.path), { dataDir: input.dataDir, timeoutMs: 20_000 });
+    if (r.exitCode !== 0 && !r.stdout.includes('ACTIVE:')) {
+        const probe = {
+            at,
+            ok: false,
+            notes: [
+                tl('notes.auto.t0152', { v0: ((r.stderr || r.stdout || 'connection failed').slice(0, 160)) }),
+            ],
+            latencyMs: Date.now() - t0
+        };
+        if (input.db)
+            updatePeerLastProbe(input.db, input.peer.id, probe);
+        return probe;
+    }
+    const active = r.stdout.match(/ACTIVE:(\S+)/)?.[1]?.trim() || 'none';
+    const zoneDirOk = /ZONE_DIR:ok/.test(r.stdout);
+    const zoneFiles = Number(r.stdout.match(/ZONE_FILES:(\d+)/)?.[1] ?? '0');
+    const serviceOk = active !== 'none';
+    const notes = [
+        serviceOk
+            ? tl('notes.auto.t0153', { v0: (active) })
+            : tl('notes.auto.n1484'),
+        zoneDirOk
+            ? tl('notes.auto.t0154', { v0: (zoneFiles) })
+            : tl('notes.auto.t0155', { v0: (input.peer.path) }),
+    ];
+    const probe = {
+        at,
+        ok: serviceOk && zoneDirOk,
+        service: active,
+        zoneDirOk,
+        notes,
+        latencyMs: Date.now() - t0
+    };
+    if (input.db)
+        updatePeerLastProbe(input.db, input.peer.id, probe);
+    return probe;
+}
+/**
+ * Probe all (or one) registered peers.
+ */
+export async function probeDnsClusterPeers(input) {
+    const peers = listDnsClusterPeers(input.db).filter((p) => !input.peerId || p.id === input.peerId);
+    if (!peers.length) {
+        return {
+            ok: true,
+            apply_status: 'written',
+            notes: [tl('notes.dns.noClusterPeer')],
+            peers: []
+        };
+    }
+    if (!input.host.executeEnabled()) {
+        return {
+            ok: false,
+            blocked: true,
+            requiresExecute: true,
+            apply_status: 'blocked',
+            notes: [tl('notes.auto.n1129')],
+            peers: []
+        };
+    }
+    const results = [];
+    const notes = [];
+    let okCount = 0;
+    for (const peer of peers) {
+        const probe = await probeDnsClusterPeer({
+            host: input.host,
+            peer,
+            dataDir: input.dataDir,
+            db: input.db
+        });
+        if (probe.ok)
+            okCount += 1;
+        results.push({
+            peerId: peer.id,
+            host: peer.host,
+            label: peer.label,
+            probe,
+            notes: probe.notes,
+            apply_status: probe.ok ? 'applied' : 'failed'
+        });
+        notes.push(`${peer.label || peer.host}: ${probe.ok ? 'healthy' : 'unhealthy'} — ${probe.notes.join('; ')}`);
+    }
+    const allOk = okCount === peers.length;
+    const noneOk = okCount === 0;
+    return {
+        ok: allOk,
+        apply_status: allOk ? 'applied' : noneOk ? 'failed' : 'partial',
+        notes,
+        peers: results
+    };
+}
+/**
+ * Reload nameserver on peer(s) via SSH (rndc / systemctl).
+ */
+export async function reloadDnsClusterPeers(input) {
+    const peers = listDnsClusterPeers(input.db).filter((p) => !input.peerId || p.id === input.peerId);
+    if (!peers.length) {
+        return {
+            ok: true,
+            apply_status: 'written',
+            notes: [tl('notes.dns.noClusterPeer')],
+            peers: []
+        };
+    }
+    if (!input.host.executeEnabled()) {
+        return {
+            ok: false,
+            blocked: true,
+            requiresExecute: true,
+            apply_status: 'blocked',
+            notes: [tl('notes.auto.n1133')],
+            peers: []
+        };
+    }
+    const results = [];
+    const notes = [];
+    let okCount = 0;
+    for (const peer of peers) {
+        const r = await sshOnPeer(input.host, peer, remoteReloadScriptForPeer(peer.path), {
+            dataDir: input.dataDir,
+            timeoutMs: 25_000
+        });
+        const method = r.stdout.match(/RELOAD_OK:(\S+)/)?.[1];
+        const reloaded = r.exitCode === 0 && Boolean(method);
+        if (reloaded)
+            okCount += 1;
+        const peerNotes = [];
+        if (reloaded) {
+            peerNotes.push(`remote reload OK (${method})`);
+        }
+        else if (/RELOAD_NONE/.test(r.stdout)) {
+            peerNotes.push(tl('notes.auto.n1481'));
+        }
+        else {
+            peerNotes.push(tl('notes.auto.t0156', { v0: ((r.stderr || r.stdout).slice(0, 140)) }));
+        }
+        notes.push(`${peer.label || peer.host}: ${peerNotes.join('; ')}`);
+        results.push({
+            peerId: peer.id,
+            host: peer.host,
+            label: peer.label,
+            reloaded,
+            reloadMethod: method,
+            notes: peerNotes,
+            apply_status: reloaded ? 'applied' : 'failed'
+        });
+    }
+    const allOk = okCount === peers.length;
+    const noneOk = okCount === 0;
+    notes.push(allOk
+        ? tl('notes.auto.n0585')
+        : noneOk
+            ? tl('notes.auto.n0586')
+            : tl('notes.auto.n1491'));
+    return {
+        ok: allOk,
+        apply_status: allOk ? 'applied' : noneOk ? 'failed' : 'partial',
+        notes,
+        peers: results
+    };
+}
+/**
+ * Push managed zone files to peers via scp; optionally remote reload after scp.
+ */
+export async function pushDnsZonesToCluster(input) {
+    const wantReload = input.reload !== false;
+    const peers = listDnsClusterPeers(input.db).filter((p) => !input.peerId || p.id === input.peerId);
+    if (!peers.length) {
+        return {
+            ok: true,
+            apply_status: 'written',
+            notes: [tl('notes.dns.noClusterPeer')],
+            peers: []
+        };
+    }
+    if (!input.host.executeEnabled()) {
+        return {
+            ok: false,
+            blocked: true,
+            requiresExecute: true,
+            apply_status: 'blocked',
+            notes: [tl('notes.auto.n1172')],
+            peers: []
+        };
+    }
+    const zoneDir = join(input.dataDir, 'dns', 'zones');
+    if (!existsSync(zoneDir)) {
+        return {
+            ok: false,
+            apply_status: 'failed',
+            notes: [tl('notes.auto.n0991')],
+            peers: []
+        };
+    }
+    const files = readdirSync(zoneDir).filter((f) => f.endsWith('.zone'));
+    if (!files.length) {
+        return {
+            ok: false,
+            apply_status: 'failed',
+            notes: [tl('notes.auto.n1057')],
+            peers: []
+        };
+    }
+    const results = [];
+    const notes = [];
+    let peersFullyApplied = 0;
+    let peersAnyOk = 0;
+    for (const peer of peers) {
+        const peerNotes = [];
+        let filesOk = 0;
+        let filesFail = 0;
+        const identityPath = await resolvePeerIdentity(input.dataDir, peer);
+        // Ensure remote dir exists (best-effort)
+        await sshOnPeer(input.host, peer, `mkdir -p ${JSON.stringify(peer.path)}`, { dataDir: input.dataDir, timeoutMs: 15_000 });
+        for (const f of files.slice(0, 50)) {
+            const local = join(zoneDir, f);
+            const scpArgv = [
+                'scp',
+                ...(identityPath
+                    ? [
+                        '-i',
+                        identityPath,
+                        '-o',
+                        'IdentitiesOnly=yes',
+                        '-o',
+                        'BatchMode=yes',
+                        '-o',
+                        'StrictHostKeyChecking=accept-new',
+                    ]
+                    : [
+                        '-o',
+                        'StrictHostKeyChecking=no',
+                        '-o',
+                        'BatchMode=yes',
+                    ]),
+                '-P',
+                String(peer.port),
+                local,
+                `${peer.username}@${peer.host}:${peer.path}/`,
+            ];
+            const r = await input.host.runCommand(scpArgv, { timeoutMs: 60_000 });
+            if (r.exitCode !== 0) {
+                filesFail += 1;
+                peerNotes.push(tl('notes.auto.t0157', { v0: (f), v1: ((r.stderr || r.stdout).slice(0, 80)) }));
+            }
+            else {
+                filesOk += 1;
+            }
+        }
+        const scpOk = filesFail === 0 && filesOk > 0;
+        if (scpOk)
+            peersAnyOk += 1;
+        else if (filesOk > 0)
+            peersAnyOk += 1;
+        peerNotes.push(scpOk
+            ? tl('notes.auto.t0158', { v0: (filesOk), v1: (peer.path) })
+            : tl('notes.auto.t0159', { v0: (filesOk), v1: (filesFail) }));
+        let reloaded = false;
+        let reloadMethod;
+        if (wantReload && filesOk > 0) {
+            const rr = await sshOnPeer(input.host, peer, remoteReloadScriptForPeer(peer.path), {
+                dataDir: input.dataDir,
+                timeoutMs: 25_000
+            });
+            reloadMethod = rr.stdout.match(/RELOAD_OK:(\S+)/)?.[1];
+            reloaded = rr.exitCode === 0 && Boolean(reloadMethod);
+            if (reloaded) {
+                peerNotes.push(`remote reload OK (${reloadMethod})`);
+            }
+            else if (/RELOAD_NONE/.test(rr.stdout)) {
+                peerNotes.push(tl('notes.auto.n0423'));
+            }
+            else {
+                peerNotes.push(tl('notes.tpl.reloadFailed', { detail: (rr.stderr || rr.stdout).slice(0, 100) }));
+            }
+        }
+        else if (!wantReload) {
+            peerNotes.push(tl('notes.auto.n1258'));
+        }
+        let probe;
+        if (input.probeAfter && filesOk > 0) {
+            probe = await probeDnsClusterPeer({
+                host: input.host,
+                peer,
+                dataDir: input.dataDir,
+                db: input.db
+            });
+            peerNotes.push(...probe.notes.map((n) => `probe: ${n}`));
+        }
+        let apply_status;
+        if (scpOk && reloaded) {
+            apply_status = 'applied';
+            peersFullyApplied += 1;
+        }
+        else if (scpOk && !wantReload) {
+            apply_status = 'written';
+        }
+        else if (scpOk && !reloaded) {
+            apply_status = 'partial'; // written on peer, not reloaded
+        }
+        else if (filesOk > 0) {
+            apply_status = 'partial';
+        }
+        else {
+            apply_status = 'failed';
+        }
+        notes.push(`${peer.label || peer.host}: ${apply_status} — ${peerNotes.slice(0, 3).join('; ')}`);
+        results.push({
+            peerId: peer.id,
+            host: peer.host,
+            label: peer.label,
+            scpOk,
+            filesOk,
+            filesFail,
+            reloaded,
+            reloadMethod,
+            probe,
+            notes: peerNotes,
+            apply_status
+        });
+    }
+    const allApplied = peersFullyApplied === peers.length;
+    const anyPartial = results.some((r) => r.apply_status === 'partial' || r.apply_status === 'written');
+    const allFailed = results.every((r) => r.apply_status === 'failed');
+    let apply_status;
+    let ok;
+    if (allApplied) {
+        apply_status = 'applied';
+        ok = true;
+        notes.push(tl('notes.auto.n0588'));
+    }
+    else if (allFailed) {
+        apply_status = 'failed';
+        ok = false;
+        notes.push(tl('notes.auto.n0587'));
+    }
+    else if (wantReload && peersFullyApplied > 0) {
+        apply_status = 'partial';
+        ok = false;
+        notes.push(tl('notes.auto.n1490'));
+    }
+    else if (!wantReload && peersAnyOk === peers.length) {
+        apply_status = 'written';
+        ok = true;
+        notes.push(tl('notes.auto.n0728'));
+    }
+    else {
+        apply_status = anyPartial ? 'partial' : 'failed';
+        ok = false;
+        notes.push(tl('notes.auto.n0895'));
+    }
+    return { ok, apply_status, notes, peers: results };
+}
+//# sourceMappingURL=dns-cluster.js.map

package/dist/hosting/dns-cluster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-cluster.js","sourceRoot":"","sources":["../../src/hosting/dns-cluster.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AASvC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkD3D,MAAM,GAAG,GAAG,mBAAmB,CAAC;AAEhC,MAAM,UAAU,mBAAmB,CAAC,EAAa;IAC/C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAqB,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,EAAa,EAAE,KAAuB;IACvD,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,EAAE,CAAC,OAAO,EAAE,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,EAAa,EACb,KAAmE;IAEnE,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAmB;QAC1B,EAAE;QACF,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACvB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC/B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,wBAAwB;QAC5C,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI,EAAE,aAAa;QACzD,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtD,SAAS,EAAE,IAAI,EAAE,SAAS;KAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACtD,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,EAAa,EAAE,EAAU;IAC5D,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;AAClC,CAAC;AAED,SAAS,mBAAmB,CAC1B,EAAa,EACb,MAAc,EACd,KAAyB;IAEzB,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,OAAO,CACd,IAAoB,EACpB,SAAiB,EACjB,YAAqB;IAErB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CACP,IAAI,EACJ,YAAY,EACZ,IAAI,EACJ,oBAAoB,EACpB,IAAI,EACJ,eAAe,EACf,IAAI,EACJ,kCAAkC,EAClC,IAAI,EACJ,mBAAmB,CACpB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CACP,IAAI,EACJ,0BAA0B,EAC1B,IAAI,EACJ,eAAe,EACf,IAAI,EACJ,mBAAmB,CACpB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CACP,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EACjB,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,EAC/B,MAAM,EACN,KAAK,EACL,SAAS,CACV,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAA2B,EAC3B,IAAoB;IAEpB,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAC7C,iCAAiC,CAClC,CAAC;QACF,MAAM,CAAC,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,IAAkB,EAClB,IAAoB,EACpB,SAAiB,EACjB,IAA+C;IAE/C,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;QACpC,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,MAAM;KAAE,CAAC,CAAC;IAC1C,OAAO;QACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;QACtB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;KAAE,CAAC;AAC7B,CAAC;AAED,0DAA0D;AAC1D,MAAM,mBAAmB,GAAG,CAAC,QAAgB,EAAE,EAAE,CAC/C;IACE,UAAU;IACV,+BAA+B;IAC/B,2EAA2E;IAC3E,MAAM;IACN,kBAAkB;IAClB,WAAW,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,2DAA2D;IAC9F,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,6DAA6D;CAC5F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf;;;;GAIG;AACH,mFAAmF;AACnF,sGAAsG;AACtG,MAAM,oBAAoB,GAAG;IAC3B,mBAAmB;IACnB,iDAAiD;IACjD,6CAA6C;IAC7C,wBAAwB;IACxB,0CAA0C;IAC1C,iCAAiC;IACjC,yEAAyE;IACzE,uDAAuD;IACvD,sDAAsD;IACtD,kBAAkB;IAClB,2BAA2B;IAC3B,iCAAiC;IACjC,+BAA+B;IAC/B,mCAAmC;IACnC,wCAAwC;IACxC,iEAAiE;IACjE,2DAA2D;IAC3D,gIAAgI;IAChI,UAAU;IACV,MAAM;IACN,gCAAgC;IAChC,8BAA8B;IAC9B,qGAAqG;IACrG,MAAM;IACN,iEAAiE;IACjE,6DAA6D;IAC7D,MAAM;IACN,qHAAqH;IACrH,kEAAkE;IAClE,MAAM;IACN,0FAA0F;IAC1F,oDAAoD;IACpD,iDAAiD;IACjD,6CAA6C;IAC7C,MAAM;IACN,6CAA6C;IAC7C,iCAAiC;IACjC,UAAU;IACV,IAAI;IACJ,MAAM,cAAc,CAAC,MAAM,CAAC,QAAQ;IACpC,gDAAgD;IAChD,iCAAiC;IACjC,IAAI;IACJ,0BAA0B;IAC1B,yDAAyD;IACzD,0DAA0D;IAC1D,iCAAiC;IACjC,MAAM;IACN,MAAM;IACN,0BAA0B;CAC3B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,gEAAgE;AAChE,MAAM,UAAU,yBAAyB,CAAC,YAAoB;IAC5D,mEAAmE;IACnE,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;QACtC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,GAAG;QACzC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACnB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;YAC7B,CAAC,CAAC,CAAC,CAAC;IACR,OAAO,uBAAuB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,oBAAoB,EAAE,CAAC;AAC7H,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAKzC;IACC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,OAAO;YACL,EAAE;YACF,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;SAAE,CAAC;IACjC,CAAC;IAED,MAAM,CAAC,GAAG,MAAM,SAAS,CACvB,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,IAAI,EACV,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EACpC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAC9C,CAAC;IAEF,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAuB;YAChC,EAAE;YACF,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,mBAAmB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;aAC9F;YACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;SAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,EAAE;YAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GACV,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;IACxD,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,MAAM,KAAK,MAAM,CAAC;IACpC,MAAM,KAAK,GAAa;QACtB,SAAS;YACP,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC;QAC1B,SAAS;YACP,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;KACtD,CAAC;IACF,MAAM,KAAK,GAAuB;QAChC,EAAE;QACF,EAAE,EAAE,SAAS,IAAI,SAAS;QAC1B,OAAO,EAAE,MAAM;QACf,SAAS;QACT,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;KAAE,CAAC;IAC/B,IAAI,KAAK,CAAC,EAAE;QAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAK1C;IACC,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,CAC9C,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC;YACtC,KAAK,EAAE,EAAE;SAAE,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,KAAK,EAAE,EAAE;SAAE,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI;YACJ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,EAAE,EAAE,KAAK,CAAC,EAAE;SAAE,CAAC,CAAC;QAClB,IAAI,KAAK,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;SAAE,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChG,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,CAAC,MAAM,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,CAAC;IAC7B,OAAO;QACL,EAAE,EAAE,KAAK;QACT,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC/D,KAAK;QACL,KAAK,EAAE,OAAO;KAAE,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAK3C;IACC,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,CAC9C,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC;YACtC,KAAK,EAAE,EAAE;SAAE,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,KAAK,EAAE,EAAE;SAAE,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAChF,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,MAAM;SAAE,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,CAAC;QAC3B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,CAAC,IAAI,CAAC,qBAAqB,MAAM,GAAG,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CACZ,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CACvE,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ;YACR,YAAY,EAAE,MAAM;YACpB,KAAK,EAAE,SAAS;YAChB,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;SAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,CAAC,MAAM,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CACR,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC;QACxB,CAAC,CAAC,MAAM;YACN,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAC7B,CAAC;IACF,OAAO;QACL,EAAE,EAAE,KAAK;QACT,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC/D,KAAK;QACL,KAAK,EAAE,OAAO;KAAE,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAS3C;IACC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,CAC9C,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC;YACtC,KAAK,EAAE,EAAE;SAAE,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,KAAK,EAAE,EAAE;SAAE,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,YAAY,EAAE,QAAQ;YACtB,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,KAAK,EAAE,EAAE;SAAE,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,YAAY,EAAE,QAAQ;YACtB,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,KAAK,EAAE,EAAE;SAAE,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAEpE,yCAAyC;QACzC,MAAM,SAAS,CACb,KAAK,CAAC,IAAI,EACV,IAAI,EACJ,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACvC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAC9C,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG;gBACd,KAAK;gBACL,GAAG,CAAC,YAAY;oBACd,CAAC,CAAC;wBACE,IAAI;wBACJ,YAAY;wBACZ,IAAI;wBACJ,oBAAoB;wBACpB,IAAI;wBACJ,eAAe;wBACf,IAAI;wBACJ,kCAAkC;qBACnC;oBACH,CAAC,CAAC;wBACE,IAAI;wBACJ,0BAA0B;wBAC1B,IAAI;wBACJ,eAAe;qBAChB,CAAC;gBACN,IAAI;gBACJ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACjB,KAAK;gBACL,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG;aAC9C,CAAC;YACF,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACrB,SAAS,IAAI,CAAC,CAAC;gBACf,SAAS,CAAC,IAAI,CACZ,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAC/E,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,SAAS,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;QAC7C,IAAI,KAAK;YAAE,UAAU,IAAI,CAAC,CAAC;aACtB,IAAI,OAAO,GAAG,CAAC;YAAE,UAAU,IAAI,CAAC,CAAC;QAEtC,SAAS,CAAC,IAAI,CACZ,KAAK;YACH,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAC/D,CAAC;QAEF,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,YAAgC,CAAC;QACrC,IAAI,UAAU,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjF,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,MAAM;aAAE,CAAC,CAAC;YACvB,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACvD,QAAQ,GAAG,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YACtD,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,CAAC,IAAI,CAAC,qBAAqB,YAAY,GAAG,CAAC,CAAC;YACvD,CAAC;iBAAM,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,SAAS,CAAC,IAAI,CACZ,EAAE,CAAC,kBAAkB,CAAC,CACvB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,IAAI,CACZ,EAAE,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,KAAqC,CAAC;QAC1C,IAAI,KAAK,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACpC,KAAK,GAAG,MAAM,mBAAmB,CAAC;gBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI;gBACJ,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,EAAE,EAAE,KAAK,CAAC,EAAE;aAAE,CAAC,CAAC;YAClB,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,YAAyB,CAAC;QAC9B,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;YACtB,YAAY,GAAG,SAAS,CAAC;YACzB,iBAAiB,IAAI,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,YAAY,GAAG,SAAS,CAAC;QAC3B,CAAC;aAAM,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,YAAY,GAAG,SAAS,CAAC,CAAC,gCAAgC;QAC5D,CAAC;aAAM,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACvB,YAAY,GAAG,SAAS,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,QAAQ,CAAC;QAC1B,CAAC;QAED,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK;YACL,OAAO;YACP,SAAS;YACT,QAAQ;YACR,YAAY;YACZ,KAAK;YACL,KAAK,EAAE,SAAS;YAChB,YAAY;SAAE,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,KAAK,KAAK,CAAC,MAAM,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,CACpE,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC;IAEpE,IAAI,YAAyB,CAAC;IAC9B,IAAI,EAAW,CAAC;IAChB,IAAI,UAAU,EAAE,CAAC;QACf,YAAY,GAAG,SAAS,CAAC;QACzB,EAAE,GAAG,IAAI,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,YAAY,GAAG,QAAQ,CAAC;QACxB,EAAE,GAAG,KAAK,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,UAAU,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;QAC/C,YAAY,GAAG,SAAS,CAAC;QACzB,EAAE,GAAG,KAAK,CAAC;QACX,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,kBAAkB,CAAC,CACvB,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACtD,YAAY,GAAG,SAAS,CAAC;QACzB,EAAE,GAAG,IAAI,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjD,EAAE,GAAG,KAAK,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACrD,CAAC"}

package/dist/hosting/dns-health.d.ts

@@ -0,0 +1,93 @@
+import type { HostExecutor } from '../host/executor.js';
+export type DnsHealthTone = 'ok' | 'warn' | 'danger' | 'neutral';
+export type DnsHealthDto = {
+    ok: boolean;
+    /** Best active unit: named | bind9 | pdns | none */
+    unit: string;
+    unitActive: boolean;
+    listenUdp53: boolean;
+    listenTcp53: boolean;
+    /** Managed zone files under dataDir */
+    zoneFiles: number;
+    /** Zones reported by pdns_control list-zones (when available) */
+    pdnsZoneCount?: number;
+    pdnsZones?: string[];
+    latestZoneWriteAt?: string;
+    latestZone?: string;
+    /** dig @local when zone provided or latest zone */
+    answeringLocal?: boolean;
+    digAnswers?: string[];
+    digNotes?: string[];
+    /** Sample A dig (www / ns1 / apex) when local SOA ok or as extra check */
+    answeringLocalA?: boolean;
+    digAName?: string;
+    digAAnswers?: string[];
+    /** Public NS for zone via dig @8.8.8.8 NS (honest: public may still be Cloudflare) */
+    publicNs?: string[];
+    publicNsNotes?: string[];
+    /** true if public NS hostnames look like this host (ns1.<zone>) — weak heuristic */
+    publicNsPointsHere?: boolean;
+    /** Panel honesty chips */
+    states: {
+        service: DnsHealthTone;
+        listen: DnsHealthTone;
+        written: DnsHealthTone;
+        /** PowerDNS list-zones vs disk zone files */
+        loaded: DnsHealthTone;
+        answering: DnsHealthTone;
+        publicNs: DnsHealthTone;
+    };
+    notes: string[];
+};
+/**
+ * dig against local authoritative NS.
+ * Tries 127.0.0.1 then public IPv4 (when pdns binds only public after heal).
+ */
+export declare function digLocalAuthoritative(input: {
+    host: HostExecutor;
+    name: string;
+    type?: string;
+    server?: string;
+}): Promise<{
+    ok: boolean;
+    answers: string[];
+    notes: string[];
+    method: string;
+}>;
+/**
+ * Build FQDNs to probe for local A answers — generic, not business hostnames.
+ * Prefer apex + www + optional relative A names from managed zone meta/records.
+ */
+export declare function buildLocalAProbeNames(zone: string, relativeANames?: string[], max?: number): string[];
+/** Whether public NS hostnames look like in-zone nameservers (ns1.zone / *.zone). */
+export declare function publicNsLooksInZone(zone: string, nsList: string[]): boolean;
+export declare function probeDnsServiceHealth(input: {
+    dataDir: string;
+    host: HostExecutor;
+    /** Optional zone name for local dig (defaults to latest managed zone) */
+    digName?: string;
+    /** Override public NS dig resolver (default 8.8.8.8 or YSK_DNS_PUBLIC_RESOLVER) */
+    publicResolver?: string;
+}): Promise<DnsHealthDto>;
+/**
+ * dig public NS for zone — honest delegation view (any domain).
+ * Resolver: input.publicResolver → env YSK_DNS_PUBLIC_RESOLVER → 8.8.8.8
+ * pointsHere: only in-zone nameserver names (ns1.zone / *.zone), never product branding.
+ */
+export declare function digPublicNs(input: {
+    host: HostExecutor;
+    zone: string;
+    publicResolver?: string;
+}): Promise<{
+    ns: string[];
+    notes: string[];
+    pointsHere?: boolean;
+    resolver: string;
+}>;
+/** Read latest apply meta if present (optional future). */
+export declare function readLatestZoneMeta(dataDir: string): {
+    zone?: string;
+    updatedAt?: string;
+    serial?: number;
+} | null;
+//# sourceMappingURL=dns-health.d.ts.map

package/dist/hosting/dns-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-health.d.ts","sourceRoot":"","sources":["../../src/hosting/dns-health.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEjE,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,0EAA0E;IAC1E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,0BAA0B;IAC1B,MAAM,EAAE;QACN,OAAO,EAAE,aAAa,CAAC;QACvB,MAAM,EAAE,aAAa,CAAC;QACtB,OAAO,EAAE,aAAa,CAAC;QACvB,6CAA6C;QAC7C,MAAM,EAAE,aAAa,CAAC;QACtB,SAAS,EAAE,aAAa,CAAC;QACzB,QAAQ,EAAE,aAAa,CAAC;KACzB,CAAC;IACF,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAmCF;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA8F/E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,GAAG,SAAI,GACN,MAAM,EAAE,CAwBV;AAED,qFAAqF;AACrF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAO3E;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,YAAY,CAAC,CAuPxB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE;IACvC,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAqDrF;AAED,2DAA2D;AAC3D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,IAAI,CAoBP"}