ysk-server-core 1.0.0

package/dist/hosting/dns-health.js

@@ -0,0 +1,491 @@
+/**
+ * DNS service health on the panel host — unit, :53 listen, zone files, local dig.
+ * Honest: written ≠ reloaded ≠ answering.
+ */
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { tl } from 'ysk-server-shared';
+import { listManagedDnsZones } from './dns-zone.js';
+async function isUnitActive(host, unit) {
+    try {
+        const r = await host.runCommand(['systemctl', 'is-active', unit], { timeoutMs: 5_000 });
+        return (r.stdout || '').trim() === 'active';
+    }
+    catch {
+        return false;
+    }
+}
+async function portOpen(host, proto, port) {
+    // ss preferred; fall back to /proc
+    const cmd = proto === 'udp'
+        ? `ss -uln 2>/dev/null | grep -E ':${port}\\s' || cat /proc/net/udp /proc/net/udp6 2>/dev/null | head -1`
+        : `ss -tln 2>/dev/null | grep -E ':${port}\\s' || cat /proc/net/tcp /proc/net/tcp6 2>/dev/null | head -1`;
+    try {
+        const r = await host.runCommand(['bash', '-c', cmd], { timeoutMs: 6_000 });
+        const out = (r.stdout || '').trim();
+        if (!out)
+            return false;
+        // ss line with :53
+        if (out.includes(`:${port}`))
+            return true;
+        // /proc hex port 0035 = 53
+        if (out.includes('0035'))
+            return true;
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * dig against local authoritative NS.
+ * Tries 127.0.0.1 then public IPv4 (when pdns binds only public after heal).
+ */
+export async function digLocalAuthoritative(input) {
+    const name = input.name.trim().replace(/\.$/, '');
+    const type = (input.type ?? 'SOA').toUpperCase();
+    if (!name) {
+        return { ok: false, answers: [], notes: ['empty name'], method: 'none' };
+    }
+    const { resolveBin, shellBinExists } = await import('./software-probe/index.js');
+    const digPath = await resolveBin(input.host, 'dig');
+    const servers = [];
+    if (input.server?.trim())
+        servers.push(input.server.trim());
+    servers.push('127.0.0.1');
+    try {
+        const ipr = await input.host.runCommand([
+            'bash',
+            '-c',
+            `ip -4 route get 1.1.1.1 2>/dev/null | awk '{for(i=1;i<=NF;i++) if($i=="src"){print $(i+1); exit}}'`,
+        ], { timeoutMs: 4_000 });
+        const pub = (ipr.stdout || '').trim();
+        if (pub && pub !== '127.0.0.1' && !servers.includes(pub))
+            servers.push(pub);
+    }
+    catch {
+        /* */
+    }
+    let lastNotes = [];
+    for (const server of servers) {
+        const at = `@${server}`;
+        const argv = digPath
+            ? [digPath, at, '+time=2', '+tries=1', '+short', type, name]
+            : [
+                'bash',
+                '-c',
+                `if ${shellBinExists('dig')}; then dig ${at} +time=2 +tries=1 +short ${JSON.stringify(type)} ${JSON.stringify(name)} 2>&1; else echo YSK_NO_DIG; fi`,
+            ];
+        const r = await input.host.runCommand(argv, { timeoutMs: 10_000 });
+        const out = `${r.stdout || ''}\n${r.stderr || ''}`;
+        if (out.includes('YSK_NO_DIG')) {
+            return { ok: false, answers: [], notes: ['dig not installed'], method: 'none' };
+        }
+        if (/connection refused|timed out|no servers could be reached/i.test(out)) {
+            lastNotes = [
+                out.split('\n').find((l) => l.trim())?.slice(0, 200) || `dig ${at} failed`,
+            ];
+            continue;
+        }
+        const answers = (r.stdout || '')
+            .split('\n')
+            .map((l) => l.trim())
+            .filter((l) => l && !l.startsWith(';') && !l.startsWith(';;'));
+        if (answers.length > 0 && r.exitCode === 0) {
+            return {
+                ok: true,
+                answers,
+                notes: [`dig ${at} ${type} ${name}`],
+                method: 'dig',
+            };
+        }
+        // Empty +short: check status (REFUSED = zone not loaded into PowerDNS)
+        const statusArgv = digPath
+            ? [digPath, at, '+time=2', '+tries=1', '+noall', '+comments', type, name]
+            : [
+                'bash',
+                '-c',
+                `if ${shellBinExists('dig')}; then dig ${at} +time=2 +tries=1 +noall +comments ${JSON.stringify(type)} ${JSON.stringify(name)} 2>&1; else true; fi`,
+            ];
+        const st = await input.host.runCommand(statusArgv, { timeoutMs: 8_000 });
+        const stOut = `${st.stdout || ''}\n${st.stderr || ''}`;
+        if (/status:\s*REFUSED/i.test(stOut)) {
+            lastNotes = [
+                `dig ${at} status: REFUSED — PowerDNS is up but zone not loaded (named.conf / rediscover). Apply zone or powerdns/load.`,
+            ];
+            // Keep trying other servers in case only one path refuses
+            continue;
+        }
+        if (/status:\s*NXDOMAIN/i.test(stOut)) {
+            lastNotes = [`dig ${at} status: NXDOMAIN`];
+            continue;
+        }
+        lastNotes = answers.length
+            ? [`empty dig answer from ${at}`]
+            : lastNotes.length
+                ? lastNotes
+                : [`empty dig answer from ${at}`];
+    }
+    return {
+        ok: false,
+        answers: [],
+        notes: lastNotes.length ? lastNotes : ['dig failed all local servers'],
+        method: 'dig',
+    };
+}
+/**
+ * Build FQDNs to probe for local A answers — generic, not business hostnames.
+ * Prefer apex + www + optional relative A names from managed zone meta/records.
+ */
+export function buildLocalAProbeNames(zone, relativeANames, max = 4) {
+    const z = zone.trim().toLowerCase().replace(/\.$/, '');
+    if (!z)
+        return [];
+    const out = [];
+    const push = (fqdn) => {
+        const n = fqdn.trim().toLowerCase().replace(/\.$/, '');
+        if (n && !out.includes(n))
+            out.push(n);
+    };
+    push(z);
+    push(`www.${z}`);
+    for (const rel of relativeANames ?? []) {
+        const r = String(rel ?? '').trim().toLowerCase().replace(/\.$/, '');
+        if (!r || r === '@') {
+            push(z);
+            continue;
+        }
+        // relative label → zone; already-absolute under zone kept as-is
+        if (r === z || r.endsWith(`.${z}`))
+            push(r);
+        else if (!r.includes('.'))
+            push(`${r}.${z}`);
+        else
+            push(r); // other FQDN left absolute (operator data)
+        if (out.length >= max)
+            break;
+    }
+    push(`ns1.${z}`);
+    return out.slice(0, max);
+}
+/** Whether public NS hostnames look like in-zone nameservers (ns1.zone / *.zone). */
+export function publicNsLooksInZone(zone, nsList) {
+    const z = zone.trim().toLowerCase().replace(/\.$/, '');
+    if (!z)
+        return false;
+    return nsList.some((raw) => {
+        const n = raw.trim().toLowerCase().replace(/\.$/, '');
+        return n === `ns1.${z}` || n === `ns2.${z}` || n.endsWith(`.${z}`);
+    });
+}
+export async function probeDnsServiceHealth(input) {
+    const notes = [];
+    const units = ['named', 'bind9', 'pdns'];
+    let unit = 'none';
+    let unitActive = false;
+    for (const u of units) {
+        if (await isUnitActive(input.host, u)) {
+            unit = u;
+            unitActive = true;
+            break;
+        }
+    }
+    if (!unitActive) {
+        notes.push('No active named/bind9/pdns unit');
+        // Diagnose pdns crash-loop vs systemd-resolved :53 conflict
+        try {
+            const jr = await input.host.runCommand([
+                'bash',
+                '-c',
+                "journalctl -u pdns -n 30 --no-pager 2>/dev/null | grep -iE 'Address already in use|Unable to bind|Fatal error' | tail -5",
+            ], { timeoutMs: 8_000 });
+            const j = (jr.stdout || '').trim();
+            if (/Address already in use|Unable to bind/i.test(j)) {
+                notes.push(tl('notes.ops.pdnsBindConflict'));
+                if (j)
+                    notes.push(j.slice(0, 280));
+            }
+            const failed = await input.host.runCommand(['bash', '-c', 'systemctl is-failed pdns 2>/dev/null; systemctl show pdns -p NRestarts --value 2>/dev/null'], { timeoutMs: 5_000 });
+            const fr = (failed.stdout || '').trim();
+            if (fr.includes('failed') || /^[1-9]/.test(fr.split('\n').pop() || '')) {
+                notes.push(`pdns unit state/restarts: ${fr.replace(/\n/g, ' | ').slice(0, 120)}`);
+            }
+        }
+        catch {
+            /* optional */
+        }
+    }
+    const listenUdp53 = await portOpen(input.host, 'udp', 53);
+    const listenTcp53 = await portOpen(input.host, 'tcp', 53);
+    if (!listenUdp53 && !listenTcp53)
+        notes.push('Port 53 not listening (UDP/TCP)');
+    else if (!listenUdp53)
+        notes.push('UDP/53 not listening');
+    else if (!listenTcp53)
+        notes.push('TCP/53 not listening');
+    const zones = listManagedDnsZones(input.dataDir);
+    const zoneFiles = zones.length;
+    let latestZoneWriteAt;
+    let latestZone;
+    for (const z of zones) {
+        const at = z.updatedAt;
+        if (at && (!latestZoneWriteAt || at > latestZoneWriteAt)) {
+            latestZoneWriteAt = at;
+            latestZone = z.zone;
+        }
+    }
+    // fallback mtime
+    if (!latestZoneWriteAt && zones[0]) {
+        try {
+            const st = statSync(zones[0].zonePath);
+            latestZoneWriteAt = st.mtime.toISOString();
+            latestZone = zones[0].zone;
+        }
+        catch {
+            /* */
+        }
+    }
+    if (zoneFiles === 0)
+        notes.push('No managed zone files under dataDir/dns/zones');
+    // PowerDNS loaded zone count (honest: disk files ≠ list-zones)
+    let pdnsZoneCount;
+    let pdnsZones;
+    if (unit === 'pdns' && unitActive) {
+        try {
+            const lz = await input.host.runCommand([
+                'bash',
+                '-c',
+                'if command -v pdns_control >/dev/null 2>&1; then pdns_control list-zones 2>/dev/null; else echo YSK_NO_PDNS_CTL; fi',
+            ], { timeoutMs: 6_000 });
+            const raw = (lz.stdout || '').trim();
+            if (!raw.includes('YSK_NO_PDNS_CTL')) {
+                const { parsePdnsListZonesOutput } = await import('./powerdns-apply.js');
+                // parse without markers: inject markers
+                pdnsZones = parsePdnsListZonesOutput(`YSK_PDNS_LIST_ZONES_BEGIN\n${raw}\nYSK_PDNS_LIST_ZONES_END`);
+                pdnsZoneCount = pdnsZones.length;
+                if (zoneFiles > 0 && pdnsZoneCount === 0) {
+                    notes.push(tl('notes.dns.zeroDomainsHint'));
+                }
+                else if (pdnsZoneCount != null) {
+                    notes.push(`PowerDNS list-zones: ${pdnsZoneCount}`);
+                }
+            }
+        }
+        catch {
+            /* optional */
+        }
+    }
+    const digTarget = (input.digName || latestZone || '').trim();
+    let answeringLocal;
+    let digAnswers;
+    let digNotes;
+    let answeringLocalA;
+    let digAName;
+    let digAAnswers;
+    if (digTarget && (listenUdp53 || unitActive)) {
+        const dig = await digLocalAuthoritative({
+            host: input.host,
+            name: digTarget,
+            type: 'SOA',
+        });
+        answeringLocal = dig.ok;
+        digAnswers = dig.answers;
+        digNotes = dig.notes;
+        if (!dig.ok)
+            notes.push(...(dig.notes ?? []).slice(0, 2));
+        // Local A probe: apex/www + relative names from managed zone meta (no hard-coded business hosts)
+        let relA;
+        try {
+            const metaPath = join(input.dataDir, 'dns', 'zones', `${digTarget}.json`);
+            if (existsSync(metaPath)) {
+                const meta = JSON.parse(readFileSync(metaPath, 'utf8'));
+                relA = (meta.records ?? [])
+                    .filter((r) => String(r.type ?? '').toUpperCase() === 'A')
+                    .map((r) => String(r.name ?? '@'))
+                    .slice(0, 5);
+            }
+        }
+        catch {
+            /* optional */
+        }
+        const aCandidates = buildLocalAProbeNames(digTarget, relA);
+        for (const aName of aCandidates) {
+            const aDig = await digLocalAuthoritative({
+                host: input.host,
+                name: aName,
+                type: 'A',
+            });
+            if (aDig.ok && aDig.answers.length > 0) {
+                answeringLocalA = true;
+                digAName = aName;
+                digAAnswers = aDig.answers;
+                notes.push(`local A ${aName} → ${aDig.answers[0]}`);
+                break;
+            }
+            if (answeringLocalA == null) {
+                answeringLocalA = false;
+                digAName = aName;
+                digAAnswers = [];
+            }
+        }
+        if (answeringLocalA === false) {
+            notes.push(tl('notes.dns.localAFailed', { zone: digTarget }));
+        }
+    }
+    else if (digTarget && !listenUdp53 && !unitActive) {
+        answeringLocal = false;
+        digNotes = ['skip dig: service not listening'];
+    }
+    // Public NS via configurable resolver — do not pretend local zone is worldwide
+    let publicNs;
+    let publicNsNotes;
+    let publicNsPointsHere;
+    if (digTarget) {
+        const pub = await digPublicNs({
+            host: input.host,
+            zone: digTarget,
+            publicResolver: input.publicResolver,
+        });
+        publicNs = pub.ns;
+        publicNsNotes = pub.notes;
+        publicNsPointsHere = pub.pointsHere;
+        notes.push(...pub.notes.slice(0, 2));
+    }
+    const loadedTone = pdnsZoneCount == null
+        ? zoneFiles > 0
+            ? 'neutral'
+            : 'warn'
+        : pdnsZoneCount === 0 && zoneFiles > 0
+            ? 'danger'
+            : pdnsZoneCount > 0
+                ? 'ok'
+                : 'warn';
+    const publicNsTone = publicNs == null
+        ? 'neutral'
+        : publicNs.length === 0
+            ? 'warn'
+            : publicNsPointsHere === true
+                ? 'ok'
+                : 'warn';
+    const states = {
+        service: unitActive ? 'ok' : 'danger',
+        listen: listenUdp53 || listenTcp53 ? (listenUdp53 && listenTcp53 ? 'ok' : 'warn') : 'danger',
+        written: zoneFiles > 0 ? 'ok' : 'warn',
+        loaded: loadedTone,
+        answering: answeringLocal === true || answeringLocalA === true
+            ? 'ok'
+            : answeringLocal === false
+                ? 'danger'
+                : 'neutral',
+        publicNs: publicNsTone,
+    };
+    // ok = local authority useful (not public NS). Public CF is a separate warn chip.
+    const listenOk = listenUdp53 || listenTcp53;
+    const zonesHealthy = zoneFiles === 0 ||
+        answeringLocal === true ||
+        answeringLocalA === true ||
+        (pdnsZoneCount != null && pdnsZoneCount > 0 && answeringLocal !== false);
+    const ok = unitActive && listenOk && zonesHealthy;
+    return {
+        ok,
+        unit,
+        unitActive,
+        listenUdp53,
+        listenTcp53,
+        zoneFiles,
+        pdnsZoneCount,
+        pdnsZones,
+        latestZoneWriteAt,
+        latestZone,
+        answeringLocal,
+        digAnswers,
+        digNotes,
+        answeringLocalA,
+        digAName,
+        digAAnswers,
+        publicNs,
+        publicNsNotes,
+        publicNsPointsHere,
+        states,
+        notes,
+    };
+}
+/**
+ * dig public NS for zone — honest delegation view (any domain).
+ * Resolver: input.publicResolver → env YSK_DNS_PUBLIC_RESOLVER → 8.8.8.8
+ * pointsHere: only in-zone nameserver names (ns1.zone / *.zone), never product branding.
+ */
+export async function digPublicNs(input) {
+    const zone = input.zone.trim().toLowerCase().replace(/\.$/, '');
+    const resolver = (input.publicResolver || process.env.YSK_DNS_PUBLIC_RESOLVER || '8.8.8.8').trim() ||
+        '8.8.8.8';
+    if (!zone)
+        return { ns: [], notes: ['empty zone for public NS dig'], resolver };
+    const { resolveBin, shellBinExists } = await import('./software-probe/index.js');
+    const digPath = await resolveBin(input.host, 'dig');
+    const at = `@${resolver}`;
+    const argv = digPath
+        ? [digPath, at, '+time=2', '+tries=1', '+short', 'NS', zone]
+        : [
+            'bash',
+            '-c',
+            `if ${shellBinExists('dig')}; then dig ${at} +time=2 +tries=1 +short NS ${JSON.stringify(zone)} 2>&1; else echo YSK_NO_DIG; fi`,
+        ];
+    try {
+        const r = await input.host.runCommand(argv, { timeoutMs: 8_000 });
+        const out = `${r.stdout || ''}\n${r.stderr || ''}`;
+        if (out.includes('YSK_NO_DIG')) {
+            return { ns: [], notes: ['dig not installed — skip public NS check'], resolver };
+        }
+        if (/connection refused|timed out|no servers could be reached/i.test(out)) {
+            return { ns: [], notes: [`public dig ${at} failed (network)`], resolver };
+        }
+        const ns = (r.stdout || '')
+            .split('\n')
+            .map((l) => l.trim().replace(/\.$/, '').toLowerCase())
+            .filter((l) => l && !l.startsWith(';') && /^[a-z0-9._-]+$/.test(l));
+        if (ns.length === 0) {
+            return { ns: [], notes: [`no public NS for ${zone} via ${resolver}`], resolver };
+        }
+        const pointsHere = publicNsLooksInZone(zone, ns);
+        // Third-party CDN/DNS brands (generic patterns only — no customer-specific NS names)
+        const thirdParty = ns.some((n) => /cloudflare|awsdns|azure-dns|domaincontrol|googledomains|ultradns|dnsimple|route53/i.test(n));
+        const notes = [
+            `public NS (${zone}) via ${resolver}: ${ns.join(', ')}`,
+            pointsHere
+                ? tl('notes.dns.publicNsHere')
+                : thirdParty
+                    ? tl('notes.dns.publicNsCloudflare')
+                    : tl('notes.dns.publicNsOther'),
+        ];
+        return { ns, notes, pointsHere, resolver };
+    }
+    catch (e) {
+        return {
+            ns: [],
+            notes: [`public NS dig error: ${e instanceof Error ? e.message : String(e)}`],
+            resolver,
+        };
+    }
+}
+/** Read latest apply meta if present (optional future). */
+export function readLatestZoneMeta(dataDir) {
+    const dir = join(dataDir, 'dns', 'zones');
+    if (!existsSync(dir))
+        return null;
+    const metas = readdirSync(dir).filter((f) => f.endsWith('.json'));
+    let best = null;
+    for (const f of metas) {
+        try {
+            const j = JSON.parse(readFileSync(join(dir, f), 'utf8'));
+            if (!best || (j.updatedAt && (!best.updatedAt || j.updatedAt > best.updatedAt))) {
+                best = j;
+            }
+        }
+        catch {
+            /* */
+        }
+    }
+    return best;
+}
+//# sourceMappingURL=dns-health.js.map

package/dist/hosting/dns-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-health.js","sourceRoot":"","sources":["../../src/hosting/dns-health.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAEvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AA4CpD,KAAK,UAAU,YAAY,CAAC,IAAkB,EAAE,IAAY;IAC1D,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,IAAkB,EAClB,KAAoB,EACpB,IAAY;IAEZ,mCAAmC;IACnC,MAAM,GAAG,GACP,KAAK,KAAK,KAAK;QACb,CAAC,CAAC,mCAAmC,IAAI,gEAAgE;QACzG,CAAC,CAAC,mCAAmC,IAAI,gEAAgE,CAAC;IAC9G,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,mBAAmB;QACnB,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,2BAA2B;QAC3B,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAK3C;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACrC;YACE,MAAM;YACN,IAAI;YACJ,oGAAoG;SACrG,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,GAAG,IAAI,GAAG,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,KAAK;IACP,CAAC;IAED,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO;YAClB,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC;YAC5D,CAAC,CAAC;gBACE,MAAM;gBACN,IAAI;gBACJ,MAAM,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,iCAAiC;aACrJ,CAAC;QACN,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,2DAA2D,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1E,SAAS,GAAG;gBACV,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,SAAS;aAC3E,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;aAC7B,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO;gBACP,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;gBACpC,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,MAAM,UAAU,GAAG,OAAO;YACxB,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;YACzE,CAAC,CAAC;gBACE,MAAM;gBACN,IAAI;gBACJ,MAAM,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,sCAAsC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,sBAAsB;aACpJ,CAAC;QACN,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACvD,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,SAAS,GAAG;gBACV,OAAO,EAAE,+GAA+G;aACzH,CAAC;YACF,0DAA0D;YAC1D,SAAS;QACX,CAAC;QACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,SAAS,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,SAAS,GAAG,OAAO,CAAC,MAAM;YACxB,CAAC,CAAC,CAAC,yBAAyB,EAAE,EAAE,CAAC;YACjC,CAAC,CAAC,SAAS,CAAC,MAAM;gBAChB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;QACtE,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,cAAyB,EACzB,GAAG,GAAG,CAAC;IAEP,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,CAAC;IACR,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,cAAc,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,CAAC,CAAC,CAAC;YACR,SAAS;QACX,CAAC;QACD,gEAAgE;QAChE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,CAAC,CAAC,CAAC;aACvC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;YACxC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,2CAA2C;QACzD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM;IAC/B,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAgB;IAChE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAO3C;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAU,CAAC;IAClD,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACtC,IAAI,GAAG,CAAC,CAAC;YACT,UAAU,GAAG,IAAI,CAAC;YAClB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC9C,4DAA4D;QAC5D,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACpC;gBACE,MAAM;gBACN,IAAI;gBACJ,0HAA0H;aAC3H,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,wCAAwC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;gBAC7C,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACxC,CAAC,MAAM,EAAE,IAAI,EAAE,4FAA4F,CAAC,EAC5G,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;YACF,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvE,KAAK,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;SAC3E,IAAI,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;SACrD,IAAI,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/B,IAAI,iBAAqC,CAAC;IAC1C,IAAI,UAA8B,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC;QACvB,IAAI,EAAE,IAAI,CAAC,CAAC,iBAAiB,IAAI,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC;YACzD,iBAAiB,GAAG,EAAE,CAAC;YACvB,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IACD,iBAAiB;IACjB,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACvC,iBAAiB,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC3C,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC;IACD,IAAI,SAAS,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAEjF,+DAA+D;IAC/D,IAAI,aAAiC,CAAC;IACtC,IAAI,SAA+B,CAAC;IACpC,IAAI,IAAI,KAAK,MAAM,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACpC;gBACE,MAAM;gBACN,IAAI;gBACJ,qHAAqH;aACtH,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;YACF,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACrC,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;gBACzE,wCAAwC;gBACxC,SAAS,GAAG,wBAAwB,CAClC,8BAA8B,GAAG,2BAA2B,CAC7D,CAAC;gBACF,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC;gBACjC,IAAI,SAAS,GAAG,CAAC,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;oBACzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBAC9C,CAAC;qBAAM,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;oBACjC,KAAK,CAAC,IAAI,CAAC,wBAAwB,aAAa,EAAE,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,cAAmC,CAAC;IACxC,IAAI,UAAgC,CAAC;IACrC,IAAI,QAA8B,CAAC;IACnC,IAAI,eAAoC,CAAC;IACzC,IAAI,QAA4B,CAAC;IACjC,IAAI,WAAiC,CAAC;IACtC,IAAI,SAAS,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC;YACtC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,cAAc,GAAG,GAAG,CAAC,EAAE,CAAC;QACxB,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC;QACzB,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE1D,iGAAiG;QACjG,IAAI,IAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;YAC1E,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAErD,CAAC;gBACF,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;qBACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC;qBACzD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;qBACjC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC;gBACvC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,eAAe,GAAG,IAAI,CAAC;gBACvB,QAAQ,GAAG,KAAK,CAAC;gBACjB,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpD,MAAM;YACR,CAAC;YACD,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;gBAC5B,eAAe,GAAG,KAAK,CAAC;gBACxB,QAAQ,GAAG,KAAK,CAAC;gBACjB,WAAW,GAAG,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,eAAe,KAAK,KAAK,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;SAAM,IAAI,SAAS,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;QACpD,cAAc,GAAG,KAAK,CAAC;QACvB,QAAQ,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,+EAA+E;IAC/E,IAAI,QAA8B,CAAC;IACnC,IAAI,aAAmC,CAAC;IACxC,IAAI,kBAAuC,CAAC;IAC5C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC;YAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,SAAS;YACf,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;QACH,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;QAClB,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC;QAC1B,kBAAkB,GAAG,GAAG,CAAC,UAAU,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,UAAU,GACd,aAAa,IAAI,IAAI;QACnB,CAAC,CAAC,SAAS,GAAG,CAAC;YACb,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM;QACV,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,SAAS,GAAG,CAAC;YACpC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,aAAa,GAAG,CAAC;gBACjB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,CAAC;IAEjB,MAAM,YAAY,GAChB,QAAQ,IAAI,IAAI;QACd,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,kBAAkB,KAAK,IAAI;gBAC3B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,CAAC;IAEjB,MAAM,MAAM,GAA2B;QACrC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;QACrC,MAAM,EAAE,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ;QAC5F,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QACtC,MAAM,EAAE,UAAU;QAClB,SAAS,EACP,cAAc,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI;YACjD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,cAAc,KAAK,KAAK;gBACxB,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,SAAS;QACjB,QAAQ,EAAE,YAAY;KACvB,CAAC;IAEF,kFAAkF;IAClF,MAAM,QAAQ,GAAG,WAAW,IAAI,WAAW,CAAC;IAC5C,MAAM,YAAY,GAChB,SAAS,KAAK,CAAC;QACf,cAAc,KAAK,IAAI;QACvB,eAAe,KAAK,IAAI;QACxB,CAAC,aAAa,IAAI,IAAI,IAAI,aAAa,GAAG,CAAC,IAAI,cAAc,KAAK,KAAK,CAAC,CAAC;IAC3E,MAAM,EAAE,GAAG,UAAU,IAAI,QAAQ,IAAI,YAAY,CAAC;IAElD,OAAO;QACL,EAAE;QACF,IAAI;QACJ,UAAU;QACV,WAAW;QACX,WAAW;QACX,SAAS;QACT,aAAa;QACb,SAAS;QACT,iBAAiB;QACjB,UAAU;QACV,cAAc;QACd,UAAU;QACV,QAAQ;QACR,eAAe;QACf,QAAQ;QACR,WAAW;QACX,QAAQ;QACR,aAAa;QACb,kBAAkB;QAClB,MAAM;QACN,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAIjC;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,QAAQ,GACZ,CAAC,KAAK,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE;QACjF,SAAS,CAAC;IACZ,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,8BAA8B,CAAC,EAAE,QAAQ,EAAE,CAAC;IAChF,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,OAAO;QAClB,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC;QAC5D,CAAC,CAAC;YACE,MAAM;YACN,IAAI;YACJ,MAAM,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,+BAA+B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,iCAAiC;SAChI,CAAC;IACN,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,0CAA0C,CAAC,EAAE,QAAQ,EAAE,CAAC;QACnF,CAAC;QACD,IAAI,2DAA2D,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1E,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC5E,CAAC;QACD,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;aACxB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;aACrD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,oBAAoB,IAAI,QAAQ,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;QACnF,CAAC;QACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjD,qFAAqF;QACrF,MAAM,UAAU,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,oFAAoF,CAAC,IAAI,CAAC,CAAC,CAAC,CAC7F,CAAC;QACF,MAAM,KAAK,GAAG;YACZ,cAAc,IAAI,SAAS,QAAQ,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACvD,UAAU;gBACR,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC;gBAC9B,CAAC,CAAC,UAAU;oBACV,CAAC,CAAC,EAAE,CAAC,8BAA8B,CAAC;oBACpC,CAAC,CAAC,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,EAAE;YACN,KAAK,EAAE,CAAC,wBAAwB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,QAAQ;SACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAKhD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,IAAI,GAAkE,IAAI,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAItD,CAAC;YACF,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBAChF,IAAI,GAAG,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/hosting/dns-lookup.d.ts

@@ -0,0 +1,22 @@
+import type { HostExecutor } from '../host/executor.js';
+export type DnsLookupType = 'A' | 'AAAA' | 'MX' | 'TXT' | 'CNAME' | 'NS';
+export type DnsLookupResult = {
+    ok: boolean;
+    name: string;
+    type: DnsLookupType;
+    answers: string[];
+    notes: string[];
+    method: 'dig' | 'node-dns' | 'none';
+    latencyMs?: number;
+};
+/**
+ * Prefer `dig +short` when available; fallback to node dns.
+ */
+export declare function lookupDns(input: {
+    host?: HostExecutor;
+    name: string;
+    type?: DnsLookupType;
+    /** e.g. 127.0.0.1 or 203.0.113.10 — dig @server (TEST-NET-3 doc IP) */
+    server?: string;
+}): Promise<DnsLookupResult>;
+//# sourceMappingURL=dns-lookup.d.ts.map

package/dist/hosting/dns-lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-lookup.d.ts","sourceRoot":"","sources":["../../src/hosting/dns-lookup.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,aAAa,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;AAEzE,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE;IACrC,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,eAAe,CAAC,CA0G3B"}

package/dist/hosting/dns-lookup.js

@@ -0,0 +1,114 @@
+import { tl } from 'ysk-server-shared';
+/**
+ * DNS lookup tools for panel (dig-like via system dig or node dns).
+ * Honest: reports tool + raw answers; never fakes records.
+ */
+import { resolve4, resolve6, resolveMx, resolveTxt, resolveCname } from 'node:dns/promises';
+/**
+ * Prefer `dig +short` when available; fallback to node dns.
+ */
+export async function lookupDns(input) {
+    const name = input.name.trim().replace(/\.$/, '');
+    const type = (input.type ?? 'A').toUpperCase();
+    const server = (input.server ?? '').trim().replace(/^@/, '');
+    const notes = [];
+    if (!name) {
+        return {
+            ok: false,
+            name: '',
+            type,
+            answers: [],
+            notes: [tl('notes.auto.n1419')],
+            method: 'none',
+        };
+    }
+    const t0 = Date.now();
+    if (input.host) {
+        const digType = type === 'CNAME' ? 'CNAME' : type;
+        const { resolveBin, shellBinExists } = await import('./software-probe/index.js');
+        const digPath = await resolveBin(input.host, 'dig');
+        const at = server ? `@${server}` : '';
+        const r = digPath
+            ? await input.host.runCommand([
+                digPath,
+                ...(at ? [at] : []),
+                '+time=3',
+                '+tries=1',
+                '+short',
+                digType,
+                name,
+            ], { timeoutMs: 12_000 })
+            : await input.host.runCommand([
+                'bash',
+                '-c',
+                `if ${shellBinExists('dig')}; then dig ${at ? JSON.stringify(at) + ' ' : ''}+time=3 +tries=1 +short ${JSON.stringify(digType)} ${JSON.stringify(name)} 2>/dev/null; else echo YSK_NO_DIG; fi`,
+            ], { timeoutMs: 12_000 });
+        const out = (r.stdout || '').trim();
+        if (!out.includes('YSK_NO_DIG') && r.exitCode === 0) {
+            const answers = out
+                .split('\n')
+                .map((l) => l.trim())
+                .filter((l) => l && !l.startsWith(';'));
+            return {
+                ok: answers.length > 0,
+                name,
+                type,
+                answers,
+                notes: answers.length
+                    ? [`dig ${type} ${name}`]
+                    : [tl('notes.auto.t0259')],
+                method: 'dig',
+                latencyMs: Date.now() - t0,
+            };
+        }
+        notes.push(tl('notes.auto.n0251'));
+    }
+    try {
+        let answers = [];
+        if (type === 'A')
+            answers = await resolve4(name);
+        else if (type === 'AAAA')
+            answers = await resolve6(name);
+        else if (type === 'MX') {
+            const mx = await resolveMx(name);
+            answers = mx
+                .sort((a, b) => a.priority - b.priority)
+                .map((m) => `${m.priority} ${m.exchange}`);
+        }
+        else if (type === 'TXT') {
+            const txt = await resolveTxt(name);
+            answers = txt.map((parts) => parts.join(''));
+        }
+        else if (type === 'CNAME') {
+            answers = await resolveCname(name);
+        }
+        else if (type === 'NS') {
+            const { resolveNs } = await import('node:dns/promises');
+            answers = await resolveNs(name);
+        }
+        return {
+            ok: answers.length > 0,
+            name,
+            type,
+            answers,
+            notes: [...notes, `node-dns ${type}`],
+            method: 'node-dns',
+            latencyMs: Date.now() - t0,
+        };
+    }
+    catch (e) {
+        return {
+            ok: false,
+            name,
+            type,
+            answers: [],
+            notes: [
+                ...notes,
+                e instanceof Error ? e.message : String(e),
+            ],
+            method: 'node-dns',
+            latencyMs: Date.now() - t0,
+        };
+    }
+}
+//# sourceMappingURL=dns-lookup.js.map

package/dist/hosting/dns-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-lookup.js","sourceRoot":"","sources":["../../src/hosting/dns-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAe5F;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAM/B;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,WAAW,EAAmB,CAAC;IAChE,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,EAAE;YACR,IAAI;YACJ,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,MAAM,EAAE,MAAM;SACf,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEtB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,OAAO;YACf,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB;gBACE,OAAO;gBACP,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,SAAS;gBACT,UAAU;gBACV,QAAQ;gBACR,OAAO;gBACP,IAAI;aACL,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB;YACH,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB;gBACE,MAAM;gBACN,IAAI;gBACJ,MAAM,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,2BAA2B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,wCAAwC;aAC9L,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;QACN,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,GAAG;iBAChB,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1C,OAAO;gBACL,EAAE,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;gBACtB,IAAI;gBACJ,IAAI;gBACJ,OAAO;gBACP,KAAK,EAAE,OAAO,CAAC,MAAM;oBACnB,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC;oBACzB,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;gBAC5B,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;aAC3B,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC;QACH,IAAI,OAAO,GAAa,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;aAC5C,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;aACpD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO,GAAG,EAAE;iBACT,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;iBACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACxD,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YACtB,IAAI;YACJ,IAAI;YACJ,OAAO;YACP,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,YAAY,IAAI,EAAE,CAAC;YACrC,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI;YACJ,IAAI;YACJ,OAAO,EAAE,EAAE;YACX,KAAK,EAAE;gBACL,GAAG,KAAK;gBACR,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAC3C;YACD,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;SAC3B,CAAC;IACJ,CAAC;AACH,CAAC"}