ysk-server-core 1.0.0

package/dist/hosting/host-migrate/restore.js

@@ -0,0 +1,420 @@
+/**
+ * Restore phase (runs on target host with local HostExecutor + dataDir).
+ * - Ensure control plane files present
+ * - Recreate OS users with preferred UID/GID
+ * - Import SQL dumps from package dir
+ * - Restore Redis RDB
+ */
+import { existsSync, statSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { assertHonestOps, tl } from 'ysk-server-shared';
+import { importSqlDatabase } from '../db-dump.js';
+import { appendMigrateStep, setMigratePhase, writeMigrateProgress } from './job-store.js';
+import { migratePackageDir } from './package-source.js';
+function shellQuote(s) {
+    return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+/**
+ * Ensure ysk.json + secrets master key exist after transfer.
+ */
+export function ensureControlPlaneFiles(dataDir) {
+    const notes = [];
+    const ysk = join(dataDir, 'ysk.json');
+    const master = join(dataDir, 'secrets', 'ssh', '.master.key');
+    let ok = true;
+    if (!existsSync(ysk)) {
+        ok = false;
+        notes.push(tl('notes.tpl.missing', { name: ysk }));
+    }
+    else
+        notes.push(tl('notes.auto.n0479'));
+    if (!existsSync(master) && !process.env.YSK_SECRETS_KEY) {
+        notes.push(tl('notes.auto.n1434'));
+    }
+    else if (existsSync(master)) {
+        notes.push(tl('notes.auto.n0426'));
+    }
+    const config = join(dataDir, 'config.json');
+    if (!existsSync(config)) {
+        notes.push(tl('notes.auto.n1435'));
+    }
+    return {
+        id: 'control-plane',
+        kind: 'control-plane',
+        ok,
+        notes,
+    };
+}
+/**
+ * Create group+user with optional fixed UID/GID; home already rsynced (-M).
+ */
+export async function restoreOsUser(input) {
+    const p = input.project;
+    const id = `os-user:${p.linux_user}`;
+    if (!input.host.executeEnabled() || !input.host.isRoot()) {
+        return {
+            id,
+            kind: 'os-user',
+            ok: false,
+            blocked: true,
+            notes: [tl('notes.auto.n0459')],
+        };
+    }
+    const user = p.linux_user.replace(/[^a-zA-Z0-9_-]/g, '');
+    if (!user) {
+        return { id, kind: 'os-user', ok: false, notes: [tl('notes.auto.n1103')] };
+    }
+    const group = (p.linux_group || user).replace(/[^a-zA-Z0-9_-]/g, '') || user;
+    const home = p.home_dir;
+    const notes = [];
+    // Ensure group
+    const gidFlag = p.gid != null && Number.isFinite(p.gid) ? `-g ${p.gid} ` : '';
+    const grp = await input.host.runCommand([
+        'bash',
+        '-c',
+        `getent group ${shellQuote(group)} >/dev/null 2>&1 || groupadd ${gidFlag}${shellQuote(group)} 2>&1; echo YSK_GRP_DONE`,
+    ], { timeoutMs: 15_000 });
+    notes.push(grp.exitCode === 0
+        ? `group ${group}`
+        : `groupadd: ${(grp.stderr || grp.stdout).slice(0, 120)}`);
+    // Ensure user (-M: no create home; -d: home path; -s nologin)
+    const uidFlag = p.uid != null && Number.isFinite(p.uid) ? `-u ${p.uid} ` : '';
+    const usr = await input.host.runCommand([
+        'bash',
+        '-c',
+        [
+            `if id ${shellQuote(user)} >/dev/null 2>&1; then echo YSK_USER_EXISTS;`,
+            `else useradd -M -d ${shellQuote(home)} -s /usr/sbin/nologin -g ${shellQuote(group)} ${uidFlag}${shellQuote(user)} 2>&1 && echo YSK_USER_CREATED; fi`,
+        ].join(' '),
+    ], { timeoutMs: 20_000 });
+    const out = `${usr.stdout || ''}${usr.stderr || ''}`;
+    const ok = usr.exitCode === 0 &&
+        (out.includes('YSK_USER_EXISTS') || out.includes('YSK_USER_CREATED'));
+    notes.push(ok
+        ? out.includes('YSK_USER_CREATED')
+            ? tl('notes.auto.t0607', { v0: (user), v1: (p.uid ?? 'auto') })
+            : tl('notes.auto.t0608', { v0: (user) })
+        : tl('notes.auto.t0609', { v0: (out.slice(0, 200)) }));
+    // Ensure ysk-web group optional
+    await input.host.runCommand([
+        'bash',
+        '-c',
+        `getent group ysk-web >/dev/null 2>&1 || groupadd ysk-web 2>/dev/null || true; usermod -aG ysk-web ${shellQuote(user)} 2>/dev/null || true`,
+    ], { timeoutMs: 10_000 });
+    // chown home if exists
+    if (existsSync(home)) {
+        const ch = await input.host.runCommand([
+            'bash',
+            '-c',
+            `chown -R ${shellQuote(user)}:${shellQuote(group)} ${shellQuote(home)} && chmod 750 ${shellQuote(home)} && echo YSK_CHOWN_OK`,
+        ], { timeoutMs: 120_000 });
+        const chOk = ch.exitCode === 0 && ch.stdout.includes('YSK_CHOWN_OK');
+        notes.push(chOk ? `chown ${home}` : tl('notes.auto.t0610', { v0: ((ch.stderr || ch.stdout).slice(0, 120)) }));
+        return {
+            id,
+            kind: 'os-user',
+            ok: ok && chOk,
+            notes,
+        };
+    }
+    notes.push(tl('notes.auto.t0611', { v0: (home) }));
+    return { id, kind: 'os-user', ok, notes };
+}
+/**
+ * Import one SQL dump; create empty DB first if needed (best-effort).
+ */
+export async function restoreSqlDatabase(input) {
+    const name = `${input.db.engine}:${input.db.name}`;
+    if (!input.db.dumpRelPath) {
+        return {
+            id: `sql:${name}`,
+            kind: 'sql',
+            ok: false,
+            notes: [tl('notes.auto.n0326')],
+        };
+    }
+    const sqlPath = join(input.dataDir, input.db.dumpRelPath);
+    if (!existsSync(sqlPath) || statSync(sqlPath).size === 0) {
+        return {
+            id: `sql:${name}`,
+            kind: 'sql',
+            ok: false,
+            notes: [tl('notes.auto.t0612', { v0: (sqlPath) })],
+        };
+    }
+    // Ensure database exists
+    const dbName = input.db.name.replace(/[^a-zA-Z0-9_]/g, '');
+    if (input.db.engine === 'postgres') {
+        await input.host.runCommand([
+            'bash',
+            '-c',
+            `sudo -u postgres psql -tc "SELECT 1 FROM pg_database WHERE datname='${dbName}'" | grep -q 1 || sudo -u postgres createdb ${dbName} 2>&1 || true`,
+        ], { timeoutMs: 30_000 });
+    }
+    else {
+        const client = input.db.engine === 'mariadb' ? 'mariadb' : 'mysql';
+        await input.host.runCommand([
+            'bash',
+            '-c',
+            `${client} -e ${JSON.stringify(`CREATE DATABASE IF NOT EXISTS \\\`${dbName}\\\` CHARACTER SET utf8mb4;`)} 2>&1 || true`,
+        ], { timeoutMs: 30_000 });
+    }
+    const r = await importSqlDatabase({
+        host: input.host,
+        engine: input.db.engine,
+        dbName: input.db.name,
+        sqlPath,
+        username: input.db.username,
+        password: input.resolvePassword?.(input.db),
+    });
+    return {
+        id: `sql:${name}`,
+        kind: 'sql',
+        ok: r.ok,
+        blocked: r.blocked,
+        notes: r.notes,
+    };
+}
+/**
+ * Restore Redis RDB: stop → copy → start (best-effort paths).
+ */
+export async function restoreRedisInstance(input) {
+    const id = `redis:${input.redis.id}`;
+    if (!input.redis.rdbRelPath) {
+        return {
+            id,
+            kind: 'redis',
+            ok: false,
+            notes: [tl('notes.auto.n0327')],
+        };
+    }
+    const rdb = join(input.dataDir, input.redis.rdbRelPath);
+    if (!existsSync(rdb)) {
+        return { id, kind: 'redis', ok: false, notes: [tl('notes.auto.t0613', { v0: (rdb) })] };
+    }
+    if (!input.host.executeEnabled()) {
+        return {
+            id,
+            kind: 'redis',
+            ok: false,
+            blocked: true,
+            notes: [tl('notes.auto.n0176')],
+        };
+    }
+    const notes = [];
+    // Resolve dump path via CONFIG
+    const host = input.redisHost ?? '127.0.0.1';
+    const port = input.redisPort ?? 6379;
+    const base = `redis-cli -h ${JSON.stringify(host)} -p ${port}`;
+    await input.host.runCommand(['bash', '-c', 'systemctl stop redis-server 2>/dev/null || systemctl stop redis 2>/dev/null || true'], { timeoutMs: 30_000 });
+    notes.push(tl('notes.auto.n0750'));
+    const cfg = await input.host.runCommand([
+        'bash',
+        '-c',
+        `${base} CONFIG GET dir 2>/dev/null; ${base} CONFIG GET dbfilename 2>/dev/null; echo ---; ls /var/lib/redis/dump.rdb 2>/dev/null || true`,
+    ], { timeoutMs: 10_000 });
+    let dir = '/var/lib/redis';
+    let name = 'dump.rdb';
+    const lines = (cfg.stdout || '')
+        .split('\n')
+        .map((l) => l.trim())
+        .filter(Boolean);
+    for (let i = 0; i < lines.length - 1; i++) {
+        if (lines[i] === 'dir')
+            dir = lines[i + 1] || dir;
+        if (lines[i] === 'dbfilename')
+            name = lines[i + 1] || name;
+    }
+    const dest = join(dir, name);
+    // Prefer remote mkdir via host (may need root for /var/lib/redis)
+    await input.host.runCommand(['bash', '-c', `mkdir -p ${JSON.stringify(dir)} 2>/dev/null || true`], { timeoutMs: 10_000 });
+    const cp = await input.host.runCommand([
+        'bash',
+        '-c',
+        `cp -a ${JSON.stringify(rdb)} ${JSON.stringify(dest)} && chown redis:redis ${JSON.stringify(dest)} 2>/dev/null || true; echo YSK_RDB_RESTORED`,
+    ], { timeoutMs: 60_000 });
+    const outCp = `${cp.stdout || ''}${cp.stderr || ''}`;
+    const copied = cp.exitCode === 0 &&
+        (outCp.includes('YSK_RDB_RESTORED') || existsSync(dest));
+    notes.push(copied
+        ? tl('notes.auto.t0614', { v0: (dest) })
+        : tl('notes.auto.t0615', { v0: (outCp.slice(0, 150)) }));
+    const start = await input.host.runCommand([
+        'bash',
+        '-c',
+        'systemctl start redis-server 2>/dev/null || systemctl start redis 2>/dev/null || redis-server --daemonize yes 2>/dev/null || true; sleep 0.5; redis-cli ping 2>/dev/null || true',
+    ], { timeoutMs: 30_000 });
+    const pong = (start.stdout || '').includes('PONG');
+    notes.push(pong ? 'redis PONG' : tl('notes.auto.t0616', { v0: ((start.stdout || start.stderr || '').slice(0, 80)) }));
+    return {
+        id,
+        kind: 'redis',
+        ok: copied,
+        notes,
+    };
+}
+/**
+ * Full restore phase on local target.
+ */
+export async function restoreOnHost(input) {
+    const dataDir = resolve(input.dataDir);
+    const items = [];
+    if (!input.host.executeEnabled()) {
+        return assertHonestOps({
+            ok: false,
+            blocked: true,
+            requiresExecute: true,
+            blockMessage: tl('notes.auto.n0419'),
+            notes: [tl('ops.blocked.needExecuteShort')],
+            items: [],
+        });
+    }
+    setMigratePhase(dataDir, input.job, 'restore');
+    writeMigrateProgress(dataDir, input.job.id, { phase: 'restore', status: 'start' });
+    const cp = ensureControlPlaneFiles(dataDir);
+    items.push(cp);
+    appendMigrateStep(dataDir, input.job, {
+        phase: 'restore',
+        name: 'control-plane',
+        result: {
+            ok: cp.ok,
+            apply_status: cp.ok ? 'written' : 'failed',
+            notes: cp.notes,
+        },
+    });
+    if (!cp.ok) {
+        setMigratePhase(dataDir, input.job, 'failed', tl('notes.auto.n0241'));
+        return assertHonestOps({
+            ok: false,
+            apply_status: 'failed',
+            notes: cp.notes,
+            items,
+        });
+    }
+    // OS users
+    for (const p of input.manifest.projects) {
+        writeMigrateProgress(dataDir, input.job.id, {
+            phase: 'restore',
+            status: 'os-user',
+            user: p.linux_user,
+        });
+        const r = await restoreOsUser({ host: input.host, project: p });
+        items.push(r);
+        appendMigrateStep(dataDir, input.job, {
+            phase: 'restore',
+            name: r.id,
+            result: {
+                ok: r.ok,
+                blocked: r.blocked,
+                apply_status: r.blocked ? 'blocked' : r.ok ? 'applied' : 'failed',
+                notes: r.notes,
+            },
+        });
+    }
+    // SQL
+    for (const d of input.manifest.databases) {
+        writeMigrateProgress(dataDir, input.job.id, {
+            phase: 'restore',
+            status: 'sql',
+            db: d.name,
+        });
+        const r = await restoreSqlDatabase({
+            host: input.host,
+            dataDir,
+            db: d,
+            resolvePassword: input.resolveSqlPassword,
+        });
+        items.push(r);
+        appendMigrateStep(dataDir, input.job, {
+            phase: 'restore',
+            name: r.id,
+            result: {
+                ok: r.ok,
+                blocked: r.blocked,
+                apply_status: r.blocked ? 'blocked' : r.ok ? 'applied' : 'failed',
+                notes: r.notes,
+            },
+        });
+    }
+    // Redis
+    const seenRedis = new Set();
+    for (const red of input.manifest.redis) {
+        if (!red.rdbRelPath) {
+            items.push({
+                id: `redis:${red.id}`,
+                kind: 'redis',
+                ok: false,
+                notes: [tl('notes.auto.n1083')],
+            });
+            continue;
+        }
+        if (seenRedis.has(red.rdbRelPath)) {
+            items.push({
+                id: `redis:${red.id}`,
+                kind: 'redis',
+                ok: true,
+                notes: [tl('notes.auto.n0592')],
+            });
+            continue;
+        }
+        seenRedis.add(red.rdbRelPath);
+        writeMigrateProgress(dataDir, input.job.id, {
+            phase: 'restore',
+            status: 'redis',
+            id: red.id,
+        });
+        const r = await restoreRedisInstance({
+            host: input.host,
+            dataDir,
+            redis: red,
+        });
+        items.push(r);
+        appendMigrateStep(dataDir, input.job, {
+            phase: 'restore',
+            name: r.id,
+            result: {
+                ok: r.ok,
+                blocked: r.blocked,
+                apply_status: r.blocked ? 'blocked' : r.ok ? 'applied' : 'failed',
+                notes: r.notes,
+            },
+        });
+    }
+    // package dir presence note
+    const pkg = migratePackageDir(dataDir, input.job.id);
+    if (!existsSync(pkg) && input.manifest.databases.length + input.manifest.redis.length > 0) {
+        items.push({
+            id: 'package-dir',
+            kind: 'control-plane',
+            ok: true,
+            notes: [
+                tl('notes.auto.t0617', { v0: (pkg) }),
+            ],
+        });
+    }
+    const hardFail = items.some((i) => !i.ok &&
+        i.kind !== 'control-plane' &&
+        // control-plane already handled; package-dir ok
+        i.id !== 'package-dir');
+    // control-plane must be ok; sql/user/redis failures are hard
+    const blocked = items.some((i) => i.blocked);
+    if (hardFail || !cp.ok) {
+        setMigratePhase(dataDir, input.job, 'failed', tl('notes.auto.n0417'));
+    }
+    writeMigrateProgress(dataDir, input.job.id, {
+        phase: 'restore',
+        status: hardFail ? 'failed' : 'done',
+    });
+    return assertHonestOps({
+        ok: !hardFail && cp.ok && !blocked,
+        blocked: blocked || undefined,
+        apply_status: hardFail ? (blocked ? 'blocked' : 'failed') : 'applied',
+        notes: [
+            hardFail ? tl('notes.auto.n0418') : tl('notes.auto.n0416'),
+            `users ${input.manifest.projects.length} · sql ${input.manifest.databases.length} · redis ${input.manifest.redis.length}`,
+            ...items.filter((i) => !i.ok).flatMap((i) => i.notes),
+        ],
+        items,
+    });
+}
+//# sourceMappingURL=restore.js.map

package/dist/hosting/host-migrate/restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.js","sourceRoot":"","sources":["../../../src/hosting/host-migrate/restore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAS1C,OAAO,EAAE,eAAe,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAGvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAcxD,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAC9D,IAAI,EAAE,GAAG,IAAI,CAAC;IACd,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,EAAE,GAAG,KAAK,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;;QAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO;QACL,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,eAAe;QACrB,EAAE;QACF,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAGnC;IACC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;IACxB,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACzD,OAAO;YACL,EAAE;YACF,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;IAC7E,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;IACxB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,eAAe;IACf,MAAM,OAAO,GACX,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACrC;QACE,MAAM;QACN,IAAI;QACJ,gBAAgB,UAAU,CAAC,KAAK,CAAC,gCAAgC,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,0BAA0B;KACvH,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,QAAQ,KAAK,CAAC;QAChB,CAAC,CAAC,SAAS,KAAK,EAAE;QAClB,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC5D,CAAC;IAEF,8DAA8D;IAC9D,MAAM,OAAO,GACX,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACrC;QACE,MAAM;QACN,IAAI;QACJ;YACE,SAAS,UAAU,CAAC,IAAI,CAAC,8CAA8C;YACvE,sBAAsB,UAAU,CAAC,IAAI,CAAC,4BAA4B,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,oCAAoC;SACtJ,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IACrD,MAAM,EAAE,GACN,GAAG,CAAC,QAAQ,KAAK,CAAC;QAClB,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,CACR,EAAE;QACA,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAChC,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YAC/D,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CACxD,CAAC;IAEF,gCAAgC;IAChC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB;QACE,MAAM;QACN,IAAI;QACJ,qGAAqG,UAAU,CAAC,IAAI,CAAC,sBAAsB;KAC5I,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IAEF,uBAAuB;IACvB,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACpC;YACE,MAAM;YACN,IAAI;YACJ,YAAY,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,IAAI,CAAC,uBAAuB;SAC9H,EACD,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;QACF,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9G,OAAO;YACL,EAAE;YACF,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,EAAE,IAAI,IAAI;YACd,KAAK;SACN,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAKxC;IACC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,OAAO,IAAI,EAAE;YACjB,IAAI,EAAE,KAAK;YACX,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;SAChC,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,EAAE,EAAE,OAAO,IAAI,EAAE;YACjB,IAAI,EAAE,KAAK;YACX,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;SACnD,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB;YACE,MAAM;YACN,IAAI;YACJ,uEAAuE,MAAM,+CAA+C,MAAM,eAAe;SAClJ,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QACnE,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB;YACE,MAAM;YACN,IAAI;YACJ,GAAG,MAAM,OAAO,IAAI,CAAC,SAAS,CAAC,qCAAqC,MAAM,6BAA6B,CAAC,eAAe;SACxH,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM;QACvB,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI;QACrB,OAAO;QACP,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,QAAQ;QAC3B,QAAQ,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;KAC5C,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,OAAO,IAAI,EAAE;QACjB,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAM1C;IACC,MAAM,EAAE,GAAG,SAAS,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE;YACF,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;SAChC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,OAAO;YACL,EAAE;YACF,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,+BAA+B;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,WAAW,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IAE/D,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB,CAAC,MAAM,EAAE,IAAI,EAAE,qFAAqF,CAAC,EACrG,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEnC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACrC;QACE,MAAM;QACN,IAAI;QACJ,GAAG,IAAI,gCAAgC,IAAI,8FAA8F;KAC1I,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,IAAI,GAAG,GAAG,gBAAgB,CAAC;IAC3B,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;SAC7B,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;QAClD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY;YAAE,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,kEAAkE;IAClE,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,sBAAsB,CAAC,EACrE,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IAEF,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACpC;QACE,MAAM;QACN,IAAI;QACJ,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,6CAA6C;KAC/I,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IACrD,MAAM,MAAM,GACV,EAAE,CAAC,QAAQ,KAAK,CAAC;QACjB,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CACR,MAAM;QACJ,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAC1D,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACvC;QACE,MAAM;QACN,IAAI;QACJ,kLAAkL;KACnL,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtH,OAAO;QACL,EAAE;QACF,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,MAAM;QACV,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAOnC;IACC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAEhC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,OAAO,eAAe,CAAC;YACrB,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC;YACpC,KAAK,EAAE,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC;YAC3C,KAAK,EAAE,EAAE;SACV,CAAkB,CAAC;IACtB,CAAC;IAED,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/C,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAEnF,MAAM,EAAE,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;QACpC,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YAC1C,KAAK,EAAE,EAAE,CAAC,KAAK;SAChB;KACF,CAAC,CAAC;IACH,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACtE,OAAO,eAAe,CAAC;YACrB,EAAE,EAAE,KAAK;YACT,YAAY,EAAE,QAAQ;YACtB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,KAAK;SACN,CAAkB,CAAC;IACtB,CAAC;IAED,WAAW;IACX,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;YAC1C,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,CAAC,CAAC,UAAU;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;YACpC,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,CAAC,CAAC,EAAE;YACV,MAAM,EAAE;gBACN,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBACjE,KAAK,EAAE,CAAC,CAAC,KAAK;aACf;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM;IACN,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACzC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;YAC1C,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,KAAK;YACb,EAAE,EAAE,CAAC,CAAC,IAAI;SACX,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO;YACP,EAAE,EAAE,CAAC;YACL,eAAe,EAAE,KAAK,CAAC,kBAAkB;SAC1C,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;YACpC,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,CAAC,CAAC,EAAE;YACV,MAAM,EAAE;gBACN,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBACjE,KAAK,EAAE,CAAC,CAAC,KAAK;aACf;SACF,CAAC,CAAC;IACL,CAAC;IAED,QAAQ;IACR,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,SAAS,GAAG,CAAC,EAAE,EAAE;gBACrB,IAAI,EAAE,OAAO;gBACb,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;aAChC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,SAAS,GAAG,CAAC,EAAE,EAAE;gBACrB,IAAI,EAAE,OAAO;gBACb,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;aAChC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9B,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;YAC1C,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,OAAO;YACf,EAAE,EAAE,GAAG,CAAC,EAAE;SACX,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC;YACnC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO;YACP,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE;YACpC,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,CAAC,CAAC,EAAE;YACV,MAAM,EAAE;gBACN,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBACjE,KAAK,EAAE,CAAC,CAAC,KAAK;aACf;SACF,CAAC,CAAC;IACL,CAAC;IAED,4BAA4B;IAC5B,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,eAAe;YACrB,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACL,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;aACtC;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CACzB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,EAAE;QACL,CAAC,CAAC,IAAI,KAAK,eAAe;QAC1B,gDAAgD;QAChD,CAAC,CAAC,EAAE,KAAK,aAAa,CACzB,CAAC;IACF,6DAA6D;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAE7C,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvB,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;QAC1C,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;KACrC,CAAC,CAAC;IAEH,OAAO,eAAe,CAAC;QACrB,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO;QAClC,OAAO,EAAE,OAAO,IAAI,SAAS;QAC7B,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACrE,KAAK,EAAE;YACL,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC;YAC1D,SAAS,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,UAAU,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,YAAY,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE;YACzH,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;SACtD;QACD,KAAK;KACN,CAAkB,CAAC;AACtB,CAAC"}

package/dist/hosting/host-migrate/temp-key.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Ephemeral SSH key for migrate: generate on source, install pubkey on target via password once.
+ * Private key lives under dataDir/migrate/<jobId>/ssh/ — never in ysk.json.
+ */
+import type { HostExecutor } from '../../host/executor.js';
+import type { OpsResultDto } from 'ysk-server-shared';
+import { type MigrateSshAuth, type MigrateSshEndpoint } from './transport.js';
+export type TempKeyMaterial = {
+    privateKeyPath: string;
+    publicKeyPath: string;
+    publicKey: string;
+    fingerprintSha256: string;
+};
+/**
+ * Generate ed25519 key pair under job migrate dir.
+ */
+export declare function createMigrateTempKey(input: {
+    dataDir: string;
+    jobId: string;
+}): TempKeyMaterial & OpsResultDto;
+/**
+ * Install public key on target using password auth (one-shot).
+ * Remote: mkdir ~/.ssh && append authorized_keys.
+ */
+export declare function installTempKeyOnTarget(input: {
+    host: HostExecutor;
+    endpoint: MigrateSshEndpoint;
+    password: string;
+    publicKey: string;
+}): Promise<OpsResultDto>;
+/**
+ * Full flow: generate key + install with password → return identity auth for later phases.
+ */
+export declare function bootstrapTempKeyAuth(input: {
+    host: HostExecutor;
+    dataDir: string;
+    jobId: string;
+    endpoint: MigrateSshEndpoint;
+    password: string;
+}): Promise<OpsResultDto & {
+    auth?: MigrateSshAuth;
+    privateKeyPath?: string;
+}>;
+/** Remove temp key files (and optionally strip from target — call revoke separately). */
+export declare function destroyLocalTempKey(dataDir: string, jobId: string): OpsResultDto;
+/**
+ * Best-effort: remove our public key line from target authorized_keys.
+ */
+export declare function revokeTempKeyOnTarget(input: {
+    host: HostExecutor;
+    endpoint: MigrateSshEndpoint;
+    auth: MigrateSshAuth;
+    publicKey: string;
+}): Promise<OpsResultDto>;
+export declare function readTempPublicKey(dataDir: string, jobId: string): string | null;
+//# sourceMappingURL=temp-key.d.ts.map

package/dist/hosting/host-migrate/temp-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temp-key.d.ts","sourceRoot":"","sources":["../../../src/hosting/host-migrate/temp-key.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAItD,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,kBAAkB,EAGxB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,eAAe,GAAG;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,eAAe,GAAG,YAAY,CA6CjC;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,YAAY,CAAC,CAmDxB;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,YAAY,GAAG;IAAE,IAAI,CAAC,EAAE,cAAc,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8B7E;AAED,yFAAyF;AACzF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,CAuBhF;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,YAAY,CAAC,CAoBxB;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,MAAM,GAAG,IAAI,CAQf"}