ysk-server-shared 1.0.0

package/dist/service-ports.d.ts

@@ -0,0 +1,70 @@
+/**
+ * SSOT: default public / panel ports for YSK Server managed services.
+ * Used by Firewall open-port chips and docs — package names vary by distro,
+ * but these are the listen ports YSK configures by default.
+ *
+ * Ranges use "from:to" (UFW syntax). Prefer not exposing DB/Redis/panel on 0.0.0.0.
+ */
+export type ServicePortProto = 'tcp' | 'udp' | 'both';
+export type ServicePortCategory = 'panel' | 'web' | 'ssh' | 'mail' | 'ftp' | 'db' | 'dns' | 'cache' | 'other';
+export type ServicePortDef = {
+    /** Stable id */
+    id: string;
+    /**
+     * Single port "80" or UFW range "30000:30100".
+     * Value used as chip value / API port field.
+     */
+    port: string;
+    proto: ServicePortProto;
+    /** Short chip label (English brand + port) */
+    label: string;
+    /** YSK feature / service id */
+    service: string;
+    category: ServicePortCategory;
+    /** Opening on public interface is usually a bad idea */
+    privateRecommended?: boolean;
+    /** Shown in hint only */
+    hint?: string;
+};
+/**
+ * Full catalog of YSK-related service ports (defaults).
+ * Order = chip display order (panel → web → ssh → mail → ftp → dns → db → cache).
+ */
+export declare const YSK_SERVICE_PORTS: ServicePortDef[];
+/**
+ * Chip options for firewall UI.
+ * `value` is always `port/proto` (e.g. `80/tcp`, `53/udp`, `30000:30100/tcp`)
+ * so DNS TCP+UDP can both appear and selection is unique.
+ * MariaDB shares MySQL 3306 — one chip only.
+ */
+export declare function listFirewallPortChips(): Array<{
+    value: string;
+    label: string;
+    proto: 'tcp' | 'udp';
+    port: string;
+    privateRecommended?: boolean;
+    service: string;
+    category: ServicePortCategory;
+    hint?: string;
+}>;
+/**
+ * Parse chip/API value: `80`, `80/tcp`, `30000:30100`, `30000:30100/tcp`.
+ */
+export declare function parsePortChipValue(raw: string): {
+    port: string;
+    from: number;
+    to: number;
+    proto?: 'tcp' | 'udp';
+} | null;
+/** Parse "80" or "30000:30100" into from/to (same if single). */
+export declare function parsePortSpec(raw: string): {
+    from: number;
+    to: number;
+} | null;
+/** True if spec is a multi-port range. */
+export declare function isPortRange(raw: string): boolean;
+/** Protocol for allow-port UI / API. `both` opens TCP and UDP. */
+export type FirewallPortProto = 'tcp' | 'udp' | 'both';
+/** UFW rule target: `80/tcp` or `30000:30100/tcp`. Not used for `both` (dual allow). */
+export declare function ufwPortTarget(port: string, proto: 'tcp' | 'udp'): string | null;
+//# sourceMappingURL=service-ports.d.ts.map

package/dist/service-ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-ports.d.ts","sourceRoot":"","sources":["../src/service-ports.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;AAEtD,MAAM,MAAM,mBAAmB,GAC3B,OAAO,GACP,KAAK,GACL,KAAK,GACL,MAAM,GACN,KAAK,GACL,IAAI,GACJ,KAAK,GACL,OAAO,GACP,OAAO,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG;IAC3B,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,gBAAgB,CAAC;IACxB,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,wDAAwD;IACxD,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,yBAAyB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,cAAc,EAgO7C,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,KAAK,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC,CAoCD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;CACvB,GAAG,IAAI,CAUP;AAED,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAc9E;AAED,0CAA0C;AAC1C,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAKhD;AAED,kEAAkE;AAClE,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvD,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,IAAI,CAK/E"}

package/dist/service-ports.js

@@ -0,0 +1,315 @@
+/**
+ * SSOT: default public / panel ports for YSK Server managed services.
+ * Used by Firewall open-port chips and docs — package names vary by distro,
+ * but these are the listen ports YSK configures by default.
+ *
+ * Ranges use "from:to" (UFW syntax). Prefer not exposing DB/Redis/panel on 0.0.0.0.
+ */
+/**
+ * Full catalog of YSK-related service ports (defaults).
+ * Order = chip display order (panel → web → ssh → mail → ftp → dns → db → cache).
+ */
+export const YSK_SERVICE_PORTS = [
+    // —— Control plane ——
+    {
+        id: 'ysk-panel',
+        port: '9287',
+        proto: 'tcp',
+        label: '9287 Panel',
+        service: 'ysk-server',
+        category: 'panel',
+        privateRecommended: true,
+        hint: 'YSK Server control plane (default listenPort)',
+    },
+    // —— SSH ——
+    {
+        id: 'ssh',
+        port: '22',
+        proto: 'tcp',
+        label: '22 SSH',
+        service: 'sshd',
+        category: 'ssh',
+    },
+    // —— Web ——
+    {
+        id: 'http',
+        port: '80',
+        proto: 'tcp',
+        label: '80 HTTP',
+        service: 'nginx',
+        category: 'web',
+    },
+    {
+        id: 'https',
+        port: '443',
+        proto: 'tcp',
+        label: '443 HTTPS',
+        service: 'nginx',
+        category: 'web',
+    },
+    {
+        id: 'http-alt',
+        port: '8080',
+        proto: 'tcp',
+        label: '8080 HTTP-alt',
+        service: 'nginx',
+        category: 'web',
+        hint: 'Alt HTTP / Apache bind when Nginx owns 80',
+    },
+    {
+        id: 'https-alt',
+        port: '8443',
+        proto: 'tcp',
+        label: '8443 HTTPS-alt',
+        service: 'nginx',
+        category: 'web',
+    },
+    // —— Mail (Postfix + Dovecot) ——
+    {
+        id: 'smtp',
+        port: '25',
+        proto: 'tcp',
+        label: '25 SMTP',
+        service: 'postfix',
+        category: 'mail',
+    },
+    {
+        id: 'smtps',
+        port: '465',
+        proto: 'tcp',
+        label: '465 SMTPS',
+        service: 'postfix',
+        category: 'mail',
+    },
+    {
+        id: 'submission',
+        port: '587',
+        proto: 'tcp',
+        label: '587 Submission',
+        service: 'postfix',
+        category: 'mail',
+    },
+    {
+        id: 'imap',
+        port: '143',
+        proto: 'tcp',
+        label: '143 IMAP',
+        service: 'dovecot',
+        category: 'mail',
+    },
+    {
+        id: 'imaps',
+        port: '993',
+        proto: 'tcp',
+        label: '993 IMAPS',
+        service: 'dovecot',
+        category: 'mail',
+    },
+    {
+        id: 'pop3',
+        port: '110',
+        proto: 'tcp',
+        label: '110 POP3',
+        service: 'dovecot',
+        category: 'mail',
+    },
+    {
+        id: 'pop3s',
+        port: '995',
+        proto: 'tcp',
+        label: '995 POP3S',
+        service: 'dovecot',
+        category: 'mail',
+    },
+    // —— FTP / FTPS (vsftpd) ——
+    {
+        id: 'ftp',
+        port: '21',
+        proto: 'tcp',
+        label: '21 FTP',
+        service: 'vsftpd',
+        category: 'ftp',
+    },
+    {
+        id: 'ftps-implicit',
+        port: '990',
+        proto: 'tcp',
+        label: '990 FTPS',
+        service: 'vsftpd',
+        category: 'ftp',
+        hint: 'Implicit FTPS (if enabled)',
+    },
+    {
+        id: 'ftps-pasv',
+        port: '30000:30100',
+        proto: 'tcp',
+        label: '30000–30100 PASV',
+        service: 'vsftpd',
+        category: 'ftp',
+        hint: 'Default FTPS passive range (pasv_min/max)',
+    },
+    // —— DNS (PowerDNS) ——
+    {
+        id: 'dns-udp',
+        port: '53',
+        proto: 'udp',
+        label: '53 DNS/UDP',
+        service: 'pdns',
+        category: 'dns',
+    },
+    {
+        id: 'dns-tcp',
+        port: '53',
+        proto: 'tcp',
+        label: '53 DNS/TCP',
+        service: 'pdns',
+        category: 'dns',
+    },
+    // —— Databases (usually private) ——
+    {
+        id: 'mysql',
+        port: '3306',
+        proto: 'tcp',
+        label: '3306 MySQL',
+        service: 'mysql',
+        category: 'db',
+        privateRecommended: true,
+    },
+    {
+        id: 'mariadb',
+        port: '3306',
+        proto: 'tcp',
+        label: '3306 MariaDB',
+        service: 'mariadb',
+        category: 'db',
+        privateRecommended: true,
+        hint: 'Same default port as MySQL (exclusive engines)',
+    },
+    {
+        id: 'postgres',
+        port: '5432',
+        proto: 'tcp',
+        label: '5432 Postgres',
+        service: 'postgresql',
+        category: 'db',
+        privateRecommended: true,
+    },
+    // —— Cache ——
+    {
+        id: 'redis',
+        port: '6379',
+        proto: 'tcp',
+        label: '6379 Redis',
+        service: 'redis',
+        category: 'cache',
+        privateRecommended: true,
+    },
+    // —— BitTorrent tracker (file shares WebTorrent/BT) ——
+    {
+        id: 'bt-tracker-http',
+        port: '8000',
+        proto: 'tcp',
+        label: '8000 BT tracker',
+        service: 'bt-tracker',
+        category: 'other',
+        privateRecommended: true,
+        hint: 'bittorrent-tracker HTTP/WebSocket announce (file share BT)',
+    },
+    {
+        id: 'bt-seeder-peers',
+        port: '6881:6889',
+        proto: 'tcp',
+        label: '6881-6889 BT peers',
+        service: 'bt-seeder',
+        category: 'other',
+        privateRecommended: true,
+        hint: 'WebTorrent/BT seeder peer listen range',
+    },
+];
+/**
+ * Chip options for firewall UI.
+ * `value` is always `port/proto` (e.g. `80/tcp`, `53/udp`, `30000:30100/tcp`)
+ * so DNS TCP+UDP can both appear and selection is unique.
+ * MariaDB shares MySQL 3306 — one chip only.
+ */
+export function listFirewallPortChips() {
+    const seen = new Set();
+    const out = [];
+    for (const p of YSK_SERVICE_PORTS) {
+        if (p.id === 'mariadb')
+            continue;
+        const protos = p.proto === 'both' ? ['tcp', 'udp'] : [p.proto === 'udp' ? 'udp' : 'tcp'];
+        for (const proto of protos) {
+            const value = `${p.port}/${proto}`;
+            if (seen.has(value))
+                continue;
+            seen.add(value);
+            out.push({
+                value,
+                label: p.label,
+                proto,
+                port: p.port,
+                privateRecommended: p.privateRecommended,
+                service: p.service,
+                category: p.category,
+                hint: p.hint,
+            });
+        }
+    }
+    return out;
+}
+/**
+ * Parse chip/API value: `80`, `80/tcp`, `30000:30100`, `30000:30100/tcp`.
+ */
+export function parsePortChipValue(raw) {
+    const s = String(raw ?? '').trim();
+    if (!s)
+        return null;
+    const m = s.match(/^(.+?)(?:\/(tcp|udp))?$/i);
+    if (!m)
+        return null;
+    const portPart = m[1].trim();
+    const proto = m[2] ? m[2].toLowerCase() : undefined;
+    const spec = parsePortSpec(portPart);
+    if (!spec)
+        return null;
+    return { port: portPart, from: spec.from, to: spec.to, proto };
+}
+/** Parse "80" or "30000:30100" into from/to (same if single). */
+export function parsePortSpec(raw) {
+    const s = String(raw ?? '').trim();
+    if (!s)
+        return null;
+    // strip accidental /proto
+    const bare = s.replace(/\/(tcp|udp)$/i, '');
+    if (bare.includes(':')) {
+        const [a, b] = bare.split(':').map((x) => Number(x.trim()));
+        if (!Number.isInteger(a) || !Number.isInteger(b))
+            return null;
+        if (a < 1 || a > 65535 || b < 1 || b > 65535)
+            return null;
+        return { from: Math.min(a, b), to: Math.max(a, b) };
+    }
+    const n = Number(bare);
+    if (!Number.isInteger(n) || n < 1 || n > 65535)
+        return null;
+    return { from: n, to: n };
+}
+/** True if spec is a multi-port range. */
+export function isPortRange(raw) {
+    const p = parsePortChipValue(raw) ?? parsePortSpec(raw);
+    if (!p)
+        return false;
+    if ('from' in p && 'to' in p)
+        return p.from !== p.to;
+    return false;
+}
+/** UFW rule target: `80/tcp` or `30000:30100/tcp`. Not used for `both` (dual allow). */
+export function ufwPortTarget(port, proto) {
+    const spec = parsePortSpec(port);
+    if (!spec)
+        return null;
+    const body = spec.from === spec.to ? String(spec.from) : `${spec.from}:${spec.to}`;
+    return `${body}/${proto}`;
+}
+//# sourceMappingURL=service-ports.js.map

package/dist/service-ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-ports.js","sourceRoot":"","sources":["../src/service-ports.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmCH;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAqB;IACjD,sBAAsB;IACtB;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,OAAO;QACjB,kBAAkB,EAAE,IAAI;QACxB,IAAI,EAAE,+CAA+C;KACtD;IAED,YAAY;IACZ;QACE,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,KAAK;KAChB;IAED,YAAY;IACZ;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,2CAA2C;KAClD;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,KAAK;KAChB;IAED,iCAAiC;IACjC;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,MAAM;KACjB;IAED,4BAA4B;IAC5B;QACE,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,4BAA4B;KACnC;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,2CAA2C;KAClD;IAED,uBAAuB;IACvB;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,KAAK;KAChB;IAED,oCAAoC;IACpC;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,IAAI;KACzB;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,IAAI;QACxB,IAAI,EAAE,gDAAgD;KACvD;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,IAAI;KACzB;IAED,cAAc;IACd;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,OAAO;QACjB,kBAAkB,EAAE,IAAI;KACzB;IAED,uDAAuD;IACvD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,OAAO;QACjB,kBAAkB,EAAE,IAAI;QACxB,IAAI,EAAE,4DAA4D;KACnE;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,OAAO;QACjB,kBAAkB,EAAE,IAAI;QACxB,IAAI,EAAE,wCAAwC;KAC/C;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB;IAUnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GASJ,EAAE,CAAC;IAER,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;YAAE,SAAS;QAEjC,MAAM,MAAM,GACV,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAE5E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK;gBACL,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;gBACxC,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAM5C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;AACjE,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,0BAA0B;IAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,IAAI,CAAE,GAAG,CAAC,IAAI,CAAE,GAAG,KAAK,IAAI,CAAE,GAAG,CAAC,IAAI,CAAE,GAAG,KAAK;YAAE,OAAO,IAAI,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAE,EAAE,CAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAE,EAAE,CAAE,CAAC,EAAE,CAAC;IAC1D,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAC5B,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,MAAM,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAKD,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAoB;IAC9D,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;IACnF,OAAO,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;AAC5B,CAAC"}

package/dist/software.d.ts

@@ -0,0 +1,40 @@
+/**
+ * One-click software install catalog — API contract.
+ */
+export interface SoftwareStatusDto {
+    id: string;
+    title: string;
+    installed: boolean;
+    active?: string;
+    bins: string[];
+    missingBins: string[];
+    features: string[];
+}
+export interface SoftwareInstallResultDto {
+    ok: boolean;
+    executed?: boolean;
+    blocked?: boolean;
+    blockMessage?: string;
+    id?: string;
+    title?: string;
+    installed?: boolean;
+    notes?: string[];
+    steps?: Array<{
+        name: string;
+        status: string;
+        detail?: string;
+    }>;
+    status?: SoftwareStatusDto;
+    results?: SoftwareInstallResultDto[];
+    /**
+     * When set to needs_exclusive_switch, UI must open SQL engine switch dialog
+     * (MySQL XOR MariaDB) instead of bare apt install.
+     */
+    code?: 'needs_exclusive_switch' | string;
+    /** Present when code=needs_exclusive_switch */
+    switchTarget?: 'mysql' | 'mariadb';
+    blockedByExclusive?: string;
+}
+export type SoftwareStatus = SoftwareStatusDto;
+export type SoftwareInstallResult = SoftwareInstallResultDto;
+//# sourceMappingURL=software.d.ts.map

package/dist/software.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"software.d.ts","sourceRoot":"","sources":["../src/software.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,OAAO,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACrC;;;OAGG;IACH,IAAI,CAAC,EAAE,wBAAwB,GAAG,MAAM,CAAC;IACzC,+CAA+C;IAC/C,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAC/C,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,CAAC"}

package/dist/software.js

@@ -0,0 +1,5 @@
+/**
+ * One-click software install catalog — API contract.
+ */
+export {};
+//# sourceMappingURL=software.js.map

package/dist/software.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"software.js","sourceRoot":"","sources":["../src/software.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/ssl.d.ts

@@ -0,0 +1,21 @@
+/**
+ * SSL certificate registry views — API contract.
+ */
+export interface CertificateViewDto {
+    id: string;
+    domain: string;
+    provider: string;
+    status: string;
+    files_exist: boolean;
+    fullchain_path?: string;
+    privkey_path?: string;
+    expires_at?: string | null;
+    bytes?: number;
+    notes?: string[];
+    updated_at?: string;
+    commands?: string[];
+    /** Contact email used for last Let's Encrypt request (for retry) */
+    email?: string;
+}
+export type CertificateView = CertificateViewDto;
+//# sourceMappingURL=ssl.d.ts.map

package/dist/ssl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl.d.ts","sourceRoot":"","sources":["../src/ssl.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,eAAe,GAAG,kBAAkB,CAAC"}

package/dist/ssl.js

@@ -0,0 +1,5 @@
+/**
+ * SSL certificate registry views — API contract.
+ */
+export {};
+//# sourceMappingURL=ssl.js.map

package/dist/ssl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl.js","sourceRoot":"","sources":["../src/ssl.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/system.d.ts

@@ -0,0 +1,179 @@
+/**
+ * System / host / readiness / defense status DTOs.
+ */
+export type ReadinessLevel = 'ready' | 'degraded' | 'missing' | 'unknown';
+export interface ReadinessItemDto {
+    id: string;
+    category: string;
+    title: string;
+    level: ReadinessLevel;
+    detail: string;
+    spec?: string;
+    fixHint?: string;
+    /** Navigate to a UI page for manual fix */
+    fixHref?: string;
+    /**
+     * Built-in one-click fix id (e.g. harden-datadir).
+     * UI POSTs /api/v1/system/readiness/fix with { action }.
+     */
+    fixAction?: string;
+    severity?: 'critical' | 'recommended' | 'optional';
+}
+export interface ProductionReadinessDto {
+    product: string;
+    generatedAt: string;
+    mode: 'production_capable' | 'degraded' | string;
+    executeEnabled: boolean;
+    isRoot: boolean;
+    score: {
+        ready: number;
+        degraded: number;
+        missing: number;
+        total: number;
+    };
+    items: ReadinessItemDto[];
+    summary: string[];
+    productionReady: boolean;
+    blockers?: ReadinessItemDto[];
+    categories?: string[];
+}
+/** Core alias */
+export type ProductionReadinessReport = ProductionReadinessDto;
+export type ReadinessItem = ReadinessItemDto;
+export interface HostOverviewDto {
+    identity: {
+        hostname: string | null;
+        prettyHostname: string | null;
+        timezone: string | null;
+    };
+    os: {
+        platform: string;
+        arch: string;
+        release: string;
+        kernel: string | null;
+    };
+    runtime: {
+        uptimeSec: number;
+        loadavg: number[];
+        cpus: number;
+        memory: {
+            total: number;
+            free: number;
+            usedRatio: number;
+        };
+        node: string;
+        pid: number;
+        uid: number | null;
+    };
+    time: {
+        utc: string;
+        local: string;
+        ntpEnabled: boolean | null;
+        ntpSynchronized: boolean | null;
+        timeSource: string | null;
+    };
+    network: {
+        ips: string[];
+        interfaces: Array<{
+            name: string;
+            addrs: string[];
+        }>;
+        resolvers: string[];
+    };
+    disks: Array<{
+        filesystem: string;
+        type: string;
+        size: string;
+        used: string;
+        avail: string;
+        usePct: number | null;
+        mount: string;
+    }>;
+    power: {
+        pending: {
+            raw: string;
+            actionHint: string | null;
+        } | null;
+    };
+    boot: {
+        defaultTarget: string | null;
+    };
+    caps: {
+        executeEnabled: boolean;
+        isRoot: boolean;
+        canPower: boolean;
+        canIdentity: boolean;
+    };
+    collectedAt: string;
+}
+export type HostOverview = HostOverviewDto;
+export interface FirewallRuleDto {
+    num?: number;
+    action: string;
+    direction?: string;
+    to?: string;
+    from?: string;
+    raw: string;
+}
+export interface FirewallStatusDto {
+    installed: boolean;
+    active: string;
+    activeLabel: string;
+    statusText: string;
+    numberedRules: string[];
+    rules: FirewallRuleDto[];
+    denyFromIps: string[];
+    allowCount: number;
+    denyCount: number;
+    defaultIncoming?: string;
+    defaultOutgoing?: string;
+    executeEnabled: boolean;
+    isRoot: boolean;
+    notes: string[];
+}
+export interface Fail2banJailDto {
+    name: string;
+    currentlyBanned?: number;
+    totalBanned?: number;
+}
+export interface Fail2banCatalogItemDto {
+    id: string;
+    label: string;
+    desc: string;
+    group: string;
+}
+export interface Fail2banStatusDto {
+    installed: boolean;
+    active: string;
+    enabled: string;
+    activeLabel: string;
+    jails: Fail2banJailDto[];
+    banned: Array<{
+        jail: string;
+        ip: string;
+    }>;
+    ignoreIps: string[];
+    catalog: Fail2banCatalogItemDto[];
+    executeEnabled: boolean;
+    isRoot: boolean;
+    notes: string[];
+    defaultJails?: string[];
+}
+export interface ServiceMatrixItemDto {
+    id: string;
+    label: string;
+    unit: string;
+    href?: string;
+    category: string;
+    installed: boolean;
+    active: string;
+    enabled: string;
+    activeLabel: string;
+}
+export interface ServiceMatrixDto {
+    items: ServiceMatrixItemDto[];
+    executeEnabled: boolean;
+    isRoot: boolean;
+    probedAt: string;
+}
+//# sourceMappingURL=system.d.ts.map

package/dist/system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../src/system.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAE1E,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,UAAU,GAAG,aAAa,GAAG,UAAU,CAAC;CACpD;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,oBAAoB,GAAG,UAAU,GAAG,MAAM,CAAC;IACjD,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,iBAAiB;AACjB,MAAM,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAC/D,MAAM,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAE7C,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE;QACR,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF,EAAE,EAAE;QACF,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,CAAC;IACF,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3D,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;KACpB,CAAC;IACF,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;QAC3B,eAAe,EAAE,OAAO,GAAG,IAAI,CAAC;QAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IACF,OAAO,EAAE;QACP,GAAG,EAAE,MAAM,EAAE,CAAC;QACd,UAAU,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;QACrD,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IACF,KAAK,EAAE,KAAK,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,KAAK,EAAE;QACL,OAAO,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC;KAC5D,CAAC;IACF,IAAI,EAAE;QACJ,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,CAAC;IACF,IAAI,EAAE;QACJ,cAAc,EAAE,OAAO,CAAC;QACxB,MAAM,EAAE,OAAO,CAAC;QAChB,QAAQ,EAAE,OAAO,CAAC;QAClB,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,YAAY,GAAG,eAAe,CAAC;AAE3C,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5C,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAClC,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB"}