ysk-server-core 1.0.0

package/dist/hosting/log-center/catalog.js

@@ -0,0 +1,321 @@
+import { tl } from 'ysk-server-shared';
+/**
+ * Curated log sources + path allowlist (fail-closed).
+ */
+import { existsSync, readdirSync, realpathSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+export const BUILTIN_LOG_SOURCES = [
+    {
+        id: 'journal:nginx',
+        kind: 'journal',
+        label: 'nginx',
+        unit: 'nginx.service',
+        group: 'web',
+        defaultEnabled: true,
+        description: 'Web server (journal)'
+    },
+    {
+        id: 'journal:sshd',
+        kind: 'journal',
+        label: 'sshd',
+        unit: 'ssh.service',
+        group: 'security',
+        defaultEnabled: true,
+        description: 'SSH (journal; some distros use sshd.service)'
+    },
+    {
+        id: 'journal:fail2ban',
+        kind: 'journal',
+        label: 'fail2ban',
+        unit: 'fail2ban.service',
+        group: 'security',
+        defaultEnabled: true
+    },
+    {
+        id: 'journal:postfix',
+        kind: 'journal',
+        label: 'postfix',
+        unit: 'postfix.service',
+        group: 'mail',
+        defaultEnabled: true
+    },
+    {
+        id: 'journal:dovecot',
+        kind: 'journal',
+        label: 'dovecot',
+        unit: 'dovecot.service',
+        group: 'mail',
+        defaultEnabled: true
+    },
+    {
+        id: 'file:syslog',
+        kind: 'file',
+        label: 'syslog',
+        paths: ['/var/log/syslog', '/var/log/messages'],
+        group: 'system',
+        defaultEnabled: true
+    },
+    {
+        id: 'file:auth',
+        kind: 'file',
+        label: 'auth',
+        paths: ['/var/log/auth.log', '/var/log/secure'],
+        group: 'security',
+        defaultEnabled: true
+    },
+    {
+        id: 'file:nginx-access',
+        kind: 'file',
+        label: 'nginx access',
+        paths: ['/var/log/nginx/access.log'],
+        group: 'web',
+        defaultEnabled: true
+    },
+    {
+        id: 'file:nginx-error',
+        kind: 'file',
+        label: 'nginx error',
+        paths: ['/var/log/nginx/error.log'],
+        group: 'web',
+        defaultEnabled: true
+    },
+    {
+        id: 'file:mail',
+        kind: 'file',
+        label: 'mail',
+        paths: ['/var/log/mail.log', '/var/log/maillog'],
+        group: 'mail',
+        defaultEnabled: true
+    },
+    {
+        id: 'file:fail2ban',
+        kind: 'file',
+        label: 'fail2ban.log',
+        paths: ['/var/log/fail2ban.log'],
+        group: 'security',
+        defaultEnabled: true
+    },
+    {
+        id: 'file:letsencrypt',
+        kind: 'file',
+        label: 'letsencrypt',
+        paths: [
+            '/var/log/letsencrypt/letsencrypt.log',
+            '/var/log/letsencrypt/letsencrypt.log.1',
+        ],
+        group: 'web',
+        defaultEnabled: true,
+        description: "Certbot / Let's Encrypt ACME (HTTP-01 challenges)"
+    },
+    {
+        id: 'journal:certbot',
+        kind: 'journal',
+        label: 'certbot',
+        unit: 'certbot.service',
+        group: 'web',
+        defaultEnabled: false,
+        description: 'certbot systemd timer/service (if packaged)'
+    },
+];
+/** Roots under which file logs may be read (after realpath). */
+export const LOG_PATH_ROOTS = [
+    '/var/log',
+    '/run/log',
+];
+/** Extract first public-ish IPv4/IPv6 from a log line (for ban deep-link). */
+export { extractIpFromLogLine } from '../../net/ip.js';
+const FORBIDDEN_SEGMENTS = [
+    '/.ssh/',
+    '/etc/',
+    '.pem',
+    '.key',
+    'id_rsa',
+    'shadow',
+    'passwd',
+    '/proc/',
+    '/sys/',
+];
+export function isForbiddenLogPath(path) {
+    const p = path.toLowerCase();
+    return FORBIDDEN_SEGMENTS.some((s) => p.includes(s));
+}
+/**
+ * Resolve and validate a path is under allowlisted roots.
+ * Returns absolute real path or null.
+ */
+export function assertLogPathAllowed(candidate, extraRoots = []) {
+    const notes = [];
+    if (!candidate || candidate.includes('\0')) {
+        return { ok: false, notes: [tl('notes.invalidPath')] };
+    }
+    if (isForbiddenLogPath(candidate)) {
+        return { ok: false, notes: [tl('notes.auto.n0878')] };
+    }
+    try {
+        if (!existsSync(candidate)) {
+            return { ok: false, notes: [tl('notes.fileMissing')] };
+        }
+        const real = realpathSync(candidate);
+        if (isForbiddenLogPath(real)) {
+            return { ok: false, notes: [tl('notes.auto.n0439')] };
+        }
+        const roots = [...LOG_PATH_ROOTS, ...extraRoots.filter(Boolean)];
+        const allowed = roots.some((root) => {
+            try {
+                const rr = existsSync(root) ? realpathSync(root) : root;
+                return real === rr || real.startsWith(rr.endsWith('/') ? rr : rr + '/');
+            }
+            catch {
+                return real === root || real.startsWith(root + '/');
+            }
+        });
+        if (!allowed) {
+            return { ok: false, notes: [tl('notes.auto.t0767', { v0: (real) })] };
+        }
+        const st = statSync(real);
+        if (!st.isFile()) {
+            return { ok: false, notes: [tl('notes.notRegularFile')] };
+        }
+        return { ok: true, path: real, notes };
+    }
+    catch (e) {
+        return {
+            ok: false,
+            notes: [e instanceof Error ? e.message : tl('notes.pathResolveFailed')]
+        };
+    }
+}
+export function resolveSourcePath(def) {
+    if (def.kind !== 'file' || !def.paths?.length) {
+        return { available: def.kind === 'journal', path: undefined };
+    }
+    for (const p of def.paths) {
+        const r = assertLogPathAllowed(p);
+        if (r.ok && r.path)
+            return { available: true, path: r.path };
+    }
+    return { available: false };
+}
+export function listSourceStatuses(opts) {
+    const disabled = new Set(opts?.disabledIds ?? []);
+    const out = [];
+    const extraRoots = opts?.customAllowPaths ?? [];
+    for (const def of BUILTIN_LOG_SOURCES) {
+        if (disabled.has(def.id))
+            continue;
+        if (def.kind === 'journal') {
+            out.push({
+                ...def,
+                available: true,
+                notes: [tl('notes.auto.n0311')]
+            });
+            continue;
+        }
+        const res = resolveSourcePath(def);
+        let bytes;
+        let mtime;
+        if (res.path) {
+            try {
+                const st = statSync(res.path);
+                bytes = st.size;
+                mtime = st.mtime.toISOString();
+            }
+            catch {
+                /* */
+            }
+        }
+        out.push({
+            ...def,
+            available: res.available,
+            resolvedPath: res.path,
+            bytes,
+            mtime,
+            notes: res.available ? undefined : [tl('notes.auto.n1021')]
+        });
+    }
+    // Custom admin paths
+    for (const p of extraRoots) {
+        const r = assertLogPathAllowed(p, extraRoots);
+        if (!r.ok || !r.path)
+            continue;
+        try {
+            const st = statSync(r.path);
+            out.push({
+                id: `file:custom:${Buffer.from(r.path).toString('base64url').slice(0, 24)}`,
+                kind: 'file',
+                label: r.path.split('/').pop() || r.path,
+                paths: [r.path],
+                group: 'other',
+                defaultEnabled: true,
+                available: true,
+                resolvedPath: r.path,
+                bytes: st.size,
+                mtime: st.mtime.toISOString(),
+                notes: [tl('notes.auto.n1338')]
+            });
+        }
+        catch {
+            /* */
+        }
+    }
+    // Extra managed nginx logs under dataDir
+    for (const dir of opts?.extraManagedLogDirs ?? []) {
+        try {
+            if (!existsSync(dir))
+                continue;
+            for (const name of readdirSync(dir).filter((n) => n.includes('access') || n.includes('error'))) {
+                const full = join(dir, name);
+                // managed under dataDir may not be under /var/log — allow if under dataDir pattern
+                if (!existsSync(full))
+                    continue;
+                try {
+                    const st = statSync(full);
+                    if (!st.isFile())
+                        continue;
+                    out.push({
+                        id: `file:managed:${name}`,
+                        kind: 'file',
+                        label: `managed ${name}`,
+                        paths: [full],
+                        group: 'web',
+                        defaultEnabled: true,
+                        available: true,
+                        resolvedPath: full,
+                        bytes: st.size,
+                        mtime: st.mtime.toISOString(),
+                        notes: ['YSK managed nginx log']
+                    });
+                }
+                catch {
+                    /* */
+                }
+            }
+        }
+        catch {
+            /* */
+        }
+    }
+    return out;
+}
+/** Allow reading managed logs under dataDir/nginx/logs explicitly. */
+export function assertManagedOrSystemLogPath(candidate, dataDir, customAllowPaths) {
+    const sys = assertLogPathAllowed(candidate, customAllowPaths);
+    if (sys.ok)
+        return sys;
+    if (!dataDir)
+        return sys;
+    try {
+        const real = realpathSync(candidate);
+        const root = realpathSync(join(dataDir, 'nginx', 'logs'));
+        if (real === root || real.startsWith(root + '/')) {
+            if (isForbiddenLogPath(real))
+                return { ok: false, notes: [tl('notes.auto.n0868')] };
+            return { ok: true, path: real, notes: ['managed log'] };
+        }
+    }
+    catch {
+        /* */
+    }
+    return sys;
+}
+//# sourceMappingURL=catalog.js.map

package/dist/hosting/log-center/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/hosting/log-center/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,CAAC,MAAM,mBAAmB,GAAmB;IACjD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,KAAK;QACZ,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,sBAAsB;KAAE;IACvC;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,UAAU;QACjB,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,8CAA8C;KAAE;IAC/D;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,UAAU;QACjB,cAAc,EAAE,IAAI;KAAE;IACxB;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,MAAM;QACb,cAAc,EAAE,IAAI;KAAE;IACxB;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,MAAM;QACb,cAAc,EAAE,IAAI;KAAE;IACxB;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QAC/C,KAAK,EAAE,QAAQ;QACf,cAAc,EAAE,IAAI;KAAE;IACxB;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,CAAC,mBAAmB,EAAE,iBAAiB,CAAC;QAC/C,KAAK,EAAE,UAAU;QACjB,cAAc,EAAE,IAAI;KAAE;IACxB;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,CAAC,2BAA2B,CAAC;QACpC,KAAK,EAAE,KAAK;QACZ,cAAc,EAAE,IAAI;KAAE;IACxB;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,CAAC,0BAA0B,CAAC;QACnC,KAAK,EAAE,KAAK;QACZ,cAAc,EAAE,IAAI;KAAE;IACxB;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,CAAC;QAChD,KAAK,EAAE,MAAM;QACb,cAAc,EAAE,IAAI;KAAE;IACxB;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,CAAC,uBAAuB,CAAC;QAChC,KAAK,EAAE,UAAU;QACjB,cAAc,EAAE,IAAI;KAAE;IACxB;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE;YACL,sCAAsC;YACtC,wCAAwC;SACzC;QACD,KAAK,EAAE,KAAK;QACZ,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,mDAAmD;KAAE;IACpE;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,KAAK;QACZ,cAAc,EAAE,KAAK;QACrB,WAAW,EAAE,6CAA6C;KAAE;CAC/D,CAAC;AAEF,gEAAgE;AAChE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,UAAU;IACV,UAAU;CACF,CAAC;AAEX,8EAA8E;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,kBAAkB,GAAG;IACzB,QAAQ;IACR,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;CACR,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAiB,EACjB,aAAuB,EAAE;IAMzB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;QACxD,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxD,OAAO,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACxE,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC;SAAE,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAiB;IAIjD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAC9C,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAKlC;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAAC;IAEhD,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QACnC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC;gBACP,GAAG,GAAG;gBACN,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;aAAE,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAyB,CAAC;QAC9B,IAAI,KAAyB,CAAC;QAC9B,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC9B,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC;gBAChB,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK;YACP,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,GAAG;YACN,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,YAAY,EAAE,GAAG,CAAC,IAAI;YACtB,KAAK;YACL,KAAK;YACL,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;SAAE,CAAC,CAAC;IACnE,CAAC;IAED,qBAAqB;IACrB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,SAAS;QAC/B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,eAAe,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;gBAC3E,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI;gBACxC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACf,KAAK,EAAE,OAAO;gBACd,cAAc,EAAE,IAAI;gBACpB,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,CAAC,CAAC,IAAI;gBACpB,KAAK,EAAE,EAAE,CAAC,IAAI;gBACd,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;gBAC7B,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;aAAE,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,mBAAmB,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC7B,mFAAmF;gBACnF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAChC,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAC1B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;wBAAE,SAAS;oBAC3B,GAAG,CAAC,IAAI,CAAC;wBACP,EAAE,EAAE,gBAAgB,IAAI,EAAE;wBAC1B,IAAI,EAAE,MAAM;wBACZ,KAAK,EAAE,WAAW,IAAI,EAAE;wBACxB,KAAK,EAAE,CAAC,IAAI,CAAC;wBACb,KAAK,EAAE,KAAK;wBACZ,cAAc,EAAE,IAAI;wBACpB,SAAS,EAAE,IAAI;wBACf,YAAY,EAAE,IAAI;wBAClB,KAAK,EAAE,EAAE,CAAC,IAAI;wBACd,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;wBAC7B,KAAK,EAAE,CAAC,uBAAuB,CAAC;qBAAE,CAAC,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK;gBACP,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,4BAA4B,CAC1C,SAAiB,EACjB,OAAgB,EAChB,gBAA2B;IAE3B,MAAM,GAAG,GAAG,oBAAoB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC9D,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACvB,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACjD,IAAI,kBAAkB,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;YACpF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,KAAK;IACP,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/hosting/log-center/file-tail.d.ts

@@ -0,0 +1,20 @@
+import type { LogQueryResult } from './types.js';
+export declare function maskSecrets(line: string): string;
+/**
+ * Tail last N lines efficiently for large files (read tail chunk).
+ */
+export declare function tailFileLines(path: string, maxLines: number, maxBytes: number): {
+    lines: string[];
+    bytes: number;
+    truncated: boolean;
+};
+export declare function queryFileLog(opts: {
+    path: string;
+    dataDir?: string;
+    lines?: number;
+    grep?: string;
+    maxBytes?: number;
+    maskSecrets?: boolean;
+    customAllowPaths?: string[];
+}): LogQueryResult;
+//# sourceMappingURL=file-tail.d.ts.map

package/dist/hosting/log-center/file-tail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-tail.d.ts","sourceRoot":"","sources":["../../../src/hosting/log-center/file-tail.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAMjD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAqBxD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B,GAAG,cAAc,CAiDjB"}

package/dist/hosting/log-center/file-tail.js

@@ -0,0 +1,89 @@
+import { tl } from 'ysk-server-shared';
+/**
+ * Path-safe file tail for log center.
+ */
+import { openSync, readSync, closeSync, fstatSync } from 'node:fs';
+import { assertManagedOrSystemLogPath } from './catalog.js';
+import { clampLines } from './journal.js';
+const SECRET_RE = /(password|passwd|secret|token|api[_-]?key)\s*[=:]\s*['"]?[^\s'"]+/gi;
+export function maskSecrets(line) {
+    return line.replace(SECRET_RE, '$1=***');
+}
+/**
+ * Tail last N lines efficiently for large files (read tail chunk).
+ */
+export function tailFileLines(path, maxLines, maxBytes) {
+    const fd = openSync(path, 'r');
+    try {
+        const st = fstatSync(fd);
+        const size = st.size;
+        const readSize = Math.min(size, Math.max(maxBytes, 64 * 1024));
+        const buf = Buffer.alloc(readSize);
+        const start = Math.max(0, size - readSize);
+        readSync(fd, buf, 0, readSize, start);
+        let text = buf.toString('utf8');
+        if (start > 0) {
+            const nl = text.indexOf('\n');
+            if (nl >= 0)
+                text = text.slice(nl + 1);
+        }
+        const all = text.split(/\r?\n/);
+        const truncated = start > 0 || all.length > maxLines;
+        const lines = all.slice(Math.max(0, all.length - maxLines));
+        return { lines, bytes: size, truncated };
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function queryFileLog(opts) {
+    const notes = [];
+    const allowed = assertManagedOrSystemLogPath(opts.path, opts.dataDir, opts.customAllowPaths);
+    if (!allowed.ok || !allowed.path) {
+        return {
+            ok: false,
+            source: opts.path,
+            lines: [],
+            lineCount: 0,
+            truncated: false,
+            notes: allowed.notes,
+            blocked: true
+        };
+    }
+    const maxLines = clampLines(opts.lines);
+    const maxBytes = opts.maxBytes ?? 2 * 1024 * 1024;
+    try {
+        let { lines, bytes, truncated } = tailFileLines(allowed.path, maxLines, maxBytes);
+        const g = (opts.grep || '').trim().slice(0, 200);
+        if (g) {
+            const lower = g.toLowerCase();
+            lines = lines.filter((l) => l.toLowerCase().includes(lower));
+            notes.push(tl('notes.auto.t0765', { v0: (lines.length) }));
+        }
+        if (opts.maskSecrets !== false) {
+            lines = lines.map(maskSecrets);
+        }
+        notes.push(tl('notes.auto.t0766', { v0: (allowed.path), v1: (bytes), v2: (lines.length) }));
+        return {
+            ok: true,
+            source: allowed.path,
+            lines,
+            lineCount: lines.length,
+            truncated,
+            notes,
+            rawBytes: bytes
+        };
+    }
+    catch (e) {
+        return {
+            ok: false,
+            source: opts.path,
+            lines: [],
+            lineCount: 0,
+            truncated: false,
+            notes: [e instanceof Error ? e.message : tl('notes.readFailed')],
+            blocked: true
+        };
+    }
+}
+//# sourceMappingURL=file-tail.js.map

package/dist/hosting/log-center/file-tail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-tail.js","sourceRoot":"","sources":["../../../src/hosting/log-center/file-tail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,SAAS,GACb,qEAAqE,CAAC;AAExE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,QAAgB,EAChB,QAAgB;IAEhB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,QAAQ,CAAC,CAAC;QAC3C,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,EAAE,IAAI,CAAC;gBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;QACrD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAQ5B;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,4BAA4B,CAC1C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,gBAAgB,CACtB,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,IAAI,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,IAAI;SAAE,CAAC;IACpB,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAClD,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,EAAE,CAAC;YACN,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9B,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAC/B,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5F,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,SAAS;YACT,KAAK;YACL,QAAQ,EAAE,KAAK;SAAE,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,IAAI,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAChE,OAAO,EAAE,IAAI;SAAE,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/hosting/log-center/index.d.ts

@@ -0,0 +1,6 @@
+export * from './types.js';
+export * from './catalog.js';
+export * from './journal.js';
+export * from './file-tail.js';
+export * from './service.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/hosting/log-center/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hosting/log-center/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/hosting/log-center/index.js

@@ -0,0 +1,6 @@
+export * from './types.js';
+export * from './catalog.js';
+export * from './journal.js';
+export * from './file-tail.js';
+export * from './service.js';
+//# sourceMappingURL=index.js.map

package/dist/hosting/log-center/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/hosting/log-center/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/hosting/log-center/journal.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Safe journalctl wrappers — fixed argv templates only.
+ */
+import type { HostExecutor } from '../../host/executor.js';
+import type { JournalUnitRow, LogPriority, LogQueryResult } from './types.js';
+export declare function sanitizeUnit(unit: string): string | null;
+export declare function sanitizePriority(p?: string): LogPriority | undefined;
+export declare function sanitizeSince(since?: string): string | undefined;
+export declare function sanitizeGrep(grep?: string): string | undefined;
+export declare function clampLines(n?: number, max?: number): number;
+/**
+ * List service units (best-effort).
+ */
+export declare function listJournalUnits(host: HostExecutor): Promise<{
+    items: JournalUnitRow[];
+    notes: string[];
+}>;
+export declare function queryJournal(host: HostExecutor, opts: {
+    unit?: string;
+    lines?: number;
+    since?: string;
+    priority?: string;
+    grep?: string;
+    maxBytes?: number;
+}): Promise<LogQueryResult>;
+export declare function journalDiskUsage(host: HostExecutor): Promise<string | undefined>;
+export declare function vacuumJournal(host: HostExecutor, mode: 'time' | 'size', value: string): Promise<{
+    ok: boolean;
+    notes: string[];
+    blocked?: boolean;
+    requiresExecute?: boolean;
+    requiresRoot?: boolean;
+    applied?: boolean;
+}>;
+//# sourceMappingURL=journal.d.ts.map

package/dist/hosting/log-center/journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../../../src/hosting/log-center/journal.ts"],"names":[],"mappings":"AACA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAkB,MAAM,YAAY,CAAC;AAsB9F,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMxD;AAED,wBAAgB,gBAAgB,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAGpE;AAED,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOhE;AAED,wBAAgB,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM9D;AAED,wBAAgB,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,SAAO,GAAG,MAAM,CAGzD;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC;IAClE,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC,CA4CD;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;IACJ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,cAAc,CAAC,CAsGzB;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAItF;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,MAAM,GAAG,MAAM,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IACT,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC,CAuCD"}