@dragonmastery/tamer 0.1.1 → 0.28.0

package/dist/dns-records.sync-Bpzz9H0s.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-records.sync-Bpzz9H0s.mjs","names":["entry: DnsRecordStateEntry"],"sources":["../src/features/dispatch-namespace/dispatch-namespace.sync.ts","../src/features/dns-records/dns-records.sync.ts"],"sourcesContent":["import type { TenantMeta, DispatchNamespaceResourceConfig } from \"../../types.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { effectiveDispatchNamespaceName } from \"./dispatch-namespace.resolve.js\";\n\nexport async function dispatchNamespaceSync(\n  resources: DispatchNamespaceResourceConfig[],\n  tenant: TenantMeta,\n  env: string,\n  api: CFApiClient,\n  state: StateManager,\n): Promise<void> {\n  if (resources.length === 0) return;\n  if (env === \"local\") return;\n\n  const list = await api.dispatchNamespaceListAll();\n  const names = new Set(list.map((n) => n.namespace_name));\n\n  for (const config of resources) {\n    const resolved = effectiveDispatchNamespaceName(config, env, tenant);\n    const key = `dispatch_ns:${resolved}`;\n    if (!names.has(resolved)) continue;\n\n    state.set(key, {\n      type: \"dispatch_namespace\",\n      logicalName: config.logicalName,\n      derivedName: resolved,\n      createdAt: new Date().toISOString(),\n      updatedAt: new Date().toISOString(),\n    });\n  }\n}\n","import type {\n  DnsRecordResourceConfig,\n  DnsRecordStateEntry,\n  TenantMeta,\n} from \"../../types.js\";\nimport type { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport {\n  dnsRecordAppliesToEnv,\n  dnsRecordCommentMarker,\n  dnsRecordStateKey,\n} from \"./dns-records.resolve.js\";\n\n/**\n * Re-adopt every Tamer-attributed DNS record found on the live zones into\n * state. Mirrors the dispatch-namespace sync pattern: Tamer never\n * **destroys** records here, just imports rows that match its\n * attribution comment so a `apply` straight after `sync` is a no-op when\n * Cloudflare and config agree.\n *\n * Records on Cloudflare without Tamer's marker comment are ignored even\n * if they happen to match the declared `(zone, type, name)` — they are\n * presumed to be hand-managed and surface in `tamer drift` as\n * `unrecordedInState` so the operator can decide.\n */\nexport async function dnsRecordSync(\n  resources: DnsRecordResourceConfig[],\n  tenant: TenantMeta,\n  env: string,\n  api: CFApiClient,\n  state: StateManager,\n): Promise<void> {\n  if (resources.length === 0) return;\n  const applicable = resources.filter((r) => dnsRecordAppliesToEnv(r, env));\n  if (applicable.length === 0) return;\n\n  const zoneCache = new Map<\n    string,\n    Awaited<ReturnType<CFApiClient[\"zoneDnsRecordListAll\"]>>\n  >();\n\n  for (const config of applicable) {\n    let live = zoneCache.get(config.zoneId);\n    if (!live) {\n      live = await api.zoneDnsRecordListAll(config.zoneId);\n      zoneCache.set(config.zoneId, live);\n    }\n    const marker = dnsRecordCommentMarker(tenant, env, config.logicalName);\n    const adopted = live.find(\n      (r) =>\n        r.type === config.type &&\n        typeof r.comment === \"string\" &&\n        r.comment.startsWith(marker),\n    );\n    if (!adopted) continue;\n    const stateKey = dnsRecordStateKey(config.zoneId, config.type, config.name);\n    const ts = new Date().toISOString();\n    const entry: DnsRecordStateEntry = {\n      type: \"dns_record\",\n      logicalName: config.logicalName,\n      zoneId: config.zoneId,\n      recordType: config.type,\n      name: adopted.name,\n      content: adopted.content,\n      ttl: adopted.ttl ?? 1,\n      proxied: adopted.proxied ?? false,\n      priority: adopted.priority,\n      comment: adopted.comment ?? marker,\n      recordId: adopted.id,\n      createdAt: state.get(stateKey)?.type === \"dns_record\"\n        ? (state.get(stateKey) as DnsRecordStateEntry).createdAt\n        : ts,\n      updatedAt: ts,\n    };\n    state.set(stateKey, entry);\n  }\n}\n"],"mappings":";;;;AAKA,eAAsB,sBACpB,WACA,QACA,KACA,KACA,OACe;AACf,KAAI,UAAU,WAAW,EAAG;AAC5B,KAAI,QAAQ,QAAS;CAErB,MAAM,OAAO,MAAM,IAAI,0BAA0B;CACjD,MAAM,QAAQ,IAAI,IAAI,KAAK,KAAK,MAAM,EAAE,eAAe,CAAC;AAExD,MAAK,MAAM,UAAU,WAAW;EAC9B,MAAM,WAAW,+BAA+B,QAAQ,KAAK,OAAO;EACpE,MAAM,MAAM,eAAe;AAC3B,MAAI,CAAC,MAAM,IAAI,SAAS,CAAE;AAE1B,QAAM,IAAI,KAAK;GACb,MAAM;GACN,aAAa,OAAO;GACpB,aAAa;GACb,4BAAW,IAAI,MAAM,EAAC,aAAa;GACnC,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC,CAAC;;;;;;;;;;;;;;;;;;ACJN,eAAsB,cACpB,WACA,QACA,KACA,KACA,OACe;AACf,KAAI,UAAU,WAAW,EAAG;CAC5B,MAAM,aAAa,UAAU,QAAQ,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACzE,KAAI,WAAW,WAAW,EAAG;CAE7B,MAAM,4BAAY,IAAI,KAGnB;AAEH,MAAK,MAAM,UAAU,YAAY;EAC/B,IAAI,OAAO,UAAU,IAAI,OAAO,OAAO;AACvC,MAAI,CAAC,MAAM;AACT,UAAO,MAAM,IAAI,qBAAqB,OAAO,OAAO;AACpD,aAAU,IAAI,OAAO,QAAQ,KAAK;;EAEpC,MAAM,SAAS,uBAAuB,QAAQ,KAAK,OAAO,YAAY;EACtE,MAAM,UAAU,KAAK,MAClB,MACC,EAAE,SAAS,OAAO,QAClB,OAAO,EAAE,YAAY,YACrB,EAAE,QAAQ,WAAW,OAAO,CAC/B;AACD,MAAI,CAAC,QAAS;EACd,MAAM,WAAW,kBAAkB,OAAO,QAAQ,OAAO,MAAM,OAAO,KAAK;EAC3E,MAAM,sBAAK,IAAI,MAAM,EAAC,aAAa;EACnC,MAAMA,QAA6B;GACjC,MAAM;GACN,aAAa,OAAO;GACpB,QAAQ,OAAO;GACf,YAAY,OAAO;GACnB,MAAM,QAAQ;GACd,SAAS,QAAQ;GACjB,KAAK,QAAQ,OAAO;GACpB,SAAS,QAAQ,WAAW;GAC5B,UAAU,QAAQ;GAClB,SAAS,QAAQ,WAAW;GAC5B,UAAU,QAAQ;GAClB,WAAW,MAAM,IAAI,SAAS,EAAE,SAAS,eACpC,MAAM,IAAI,SAAS,CAAyB,YAC7C;GACJ,WAAW;GACZ;AACD,QAAM,IAAI,UAAU,MAAM"}

package/dist/doctor-C_hs7k2D.mjs

@@ -0,0 +1,34 @@
+import { n as cloudflareAccountIdFromEnv, r as cloudflareApiTokenFromEnv, t as CFApiClient } from "./CFApiClient-DhbyyV71.mjs";
+
+//#region src/cli/commands/doctor.ts
+async function runDoctor(options) {
+	const accountId = cloudflareAccountIdFromEnv();
+	const token = cloudflareApiTokenFromEnv();
+	const report = {
+		ok: false,
+		accountIdPresent: !!accountId,
+		apiTokenPresent: !!token && token.length > 0,
+		accountReadable: false
+	};
+	if (!accountId || token.length === 0) {
+		report.error = "CLOUDFLARE_ACCOUNT_ID and CLOUDFLARE_API_TOKEN must be set";
+		if (options.json) console.log(JSON.stringify(report, null, 2));
+		else console.error(report.error);
+		return 1;
+	}
+	try {
+		await new CFApiClient(accountId, token).accountRead();
+		report.accountReadable = true;
+		report.ok = true;
+	} catch (err) {
+		report.error = err instanceof Error ? err.message : String(err);
+	}
+	if (options.json) console.log(JSON.stringify(report, null, 2));
+	else console.log(report.ok ? "doctor: account token can read Cloudflare account API." : `doctor: failed — ${report.error ?? "unknown"}`);
+	if (!report.ok) return 1;
+	return 0;
+}
+
+//#endregion
+export { runDoctor };
+//# sourceMappingURL=doctor-C_hs7k2D.mjs.map

package/dist/doctor-C_hs7k2D.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-C_hs7k2D.mjs","names":["report: DoctorReport"],"sources":["../src/cli/commands/doctor.ts"],"sourcesContent":["import {\n  cloudflareAccountIdFromEnv,\n  cloudflareApiTokenFromEnv,\n} from \"../../core/cloudflareEnv.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\n\nexport interface DoctorReport {\n  ok: boolean;\n  accountIdPresent: boolean;\n  apiTokenPresent: boolean;\n  accountReadable: boolean;\n  error?: string;\n}\n\nexport async function runDoctor(options: { json?: boolean }): Promise<number> {\n  const accountId = cloudflareAccountIdFromEnv();\n  const token = cloudflareApiTokenFromEnv();\n  const report: DoctorReport = {\n    ok: false,\n    accountIdPresent: !!accountId,\n    apiTokenPresent: !!token && token.length > 0,\n    accountReadable: false,\n  };\n\n  if (!accountId || token.length === 0) {\n    report.error = \"CLOUDFLARE_ACCOUNT_ID and CLOUDFLARE_API_TOKEN must be set\";\n    if (options.json) console.log(JSON.stringify(report, null, 2));\n    else console.error(report.error);\n    return 1;\n  }\n\n  try {\n    const api = new CFApiClient(accountId, token);\n    await api.accountRead();\n    report.accountReadable = true;\n    report.ok = true;\n  } catch (err) {\n    report.error = err instanceof Error ? err.message : String(err);\n  }\n\n  if (options.json) {\n    console.log(JSON.stringify(report, null, 2));\n  } else {\n    console.log(\n      report.ok\n        ? \"doctor: account token can read Cloudflare account API.\"\n        : `doctor: failed — ${report.error ?? \"unknown\"}`,\n    );\n  }\n\n  if (!report.ok) {\n    return 1;\n  }\n  return 0;\n}\n"],"mappings":";;;AAcA,eAAsB,UAAU,SAA8C;CAC5E,MAAM,YAAY,4BAA4B;CAC9C,MAAM,QAAQ,2BAA2B;CACzC,MAAMA,SAAuB;EAC3B,IAAI;EACJ,kBAAkB,CAAC,CAAC;EACpB,iBAAiB,CAAC,CAAC,SAAS,MAAM,SAAS;EAC3C,iBAAiB;EAClB;AAED,KAAI,CAAC,aAAa,MAAM,WAAW,GAAG;AACpC,SAAO,QAAQ;AACf,MAAI,QAAQ,KAAM,SAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,EAAE,CAAC;MACzD,SAAQ,MAAM,OAAO,MAAM;AAChC,SAAO;;AAGT,KAAI;AAEF,QADY,IAAI,YAAY,WAAW,MAAM,CACnC,aAAa;AACvB,SAAO,kBAAkB;AACzB,SAAO,KAAK;UACL,KAAK;AACZ,SAAO,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;AAGjE,KAAI,QAAQ,KACV,SAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,EAAE,CAAC;KAE5C,SAAQ,IACN,OAAO,KACH,2DACA,oBAAoB,OAAO,SAAS,YACzC;AAGH,KAAI,CAAC,OAAO,GACV,QAAO;AAET,QAAO"}

package/dist/drift-D5qzCTft.mjs

@@ -0,0 +1,10 @@
+import "./loader-DP7yXqT6.mjs";
+import "./fetchStackImports-B4ZJahOt.mjs";
+import "./StateManager-DTqtLLVX.mjs";
+import "./r2S3EmptyBucket-DD81ZWQ7.mjs";
+import { n as runDrift, t as computeDriftReport } from "./drift-D8ZrSgTn.mjs";
+import "./logpush-job-xS7270FZ.mjs";
+import "./worker-route-Be2IvOdr.mjs";
+import "./workers-aGILs77X.mjs";
+
+export { runDrift };

package/dist/drift-D8ZrSgTn.mjs

@@ -0,0 +1,323 @@
+import { f as getDispatchNamespaces, m as getLogpushJobs, p as getDnsRecords } from "./normalize-Bx0bpFop.mjs";
+import { n as loadConfig, t as getWorkers } from "./loader-DP7yXqT6.mjs";
+import { n as cloudflareAccountIdFromEnv, t as CFApiClient } from "./CFApiClient-DhbyyV71.mjs";
+import { _ as namingFromConfig, a as resourceModules, t as fetchStackImports, u as mergeWorkerConfigForResourcePick } from "./fetchStackImports-B4ZJahOt.mjs";
+import { a as tenantStateKey, f as stackNameForConfig, o as effectiveDispatchNamespaceName, t as StateManager } from "./StateManager-DTqtLLVX.mjs";
+import { n as dnsRecordCommentMarker, r as dnsRecordStateKey, t as dnsRecordAppliesToEnv } from "./dns-records.resolve-DwBR_1WI.mjs";
+import { r as logpushJobDrift } from "./logpush-job-xS7270FZ.mjs";
+import { t as workerRoutesDrift } from "./worker-route-Be2IvOdr.mjs";
+import { t as workersDrift } from "./workers-aGILs77X.mjs";
+
+//#region src/features/dispatch-namespace/dispatch-namespace.drift.ts
+function dispatchNamespaceDrift(allDispatch, resources, env, tenant, state) {
+	const drift = {
+		kind: "dispatch_namespace",
+		missingFromCloudflare: [],
+		unrecordedInState: [],
+		undeployed: []
+	};
+	const cfNames = new Set(allDispatch.map((d) => d.namespace_name));
+	const allState = state.getAll();
+	const nsState = Object.values(allState).filter((e) => e.type === "dispatch_namespace");
+	for (const config of resources) {
+		const derivedName = effectiveDispatchNamespaceName(config, env, tenant);
+		const stateEntry = nsState.find((e) => e.logicalName === config.logicalName && e.derivedName === derivedName);
+		const onCf = cfNames.has(derivedName);
+		if (stateEntry && !onCf) drift.missingFromCloudflare.push({
+			logicalName: stateEntry.logicalName,
+			derivedName: stateEntry.derivedName
+		});
+		else if (onCf && !stateEntry) drift.unrecordedInState.push({
+			logicalName: config.logicalName,
+			derivedName
+		});
+		else if (!onCf && !stateEntry) drift.undeployed.push({
+			logicalName: config.logicalName,
+			derivedName
+		});
+	}
+	return drift;
+}
+
+//#endregion
+//#region src/features/dns-records/dns-records.drift.ts
+function dnsRecordDrift(byZone, resources, tenant, env, state) {
+	const drift = {
+		kind: "dns_record",
+		missingFromCloudflare: [],
+		unrecordedInState: [],
+		undeployed: []
+	};
+	const stateRecords = Object.values(state.getAll()).filter((e) => e.type === "dns_record");
+	for (const config of resources) {
+		if (!dnsRecordAppliesToEnv(config, env)) continue;
+		const live = byZone.get(config.zoneId) ?? [];
+		const marker = dnsRecordCommentMarker(tenant, env, config.logicalName);
+		const stateKey = dnsRecordStateKey(config.zoneId, config.type, config.name);
+		const entry = stateRecords.find((e) => e.zoneId === config.zoneId && e.recordType === config.type && e.logicalName === config.logicalName);
+		const onCf = entry ? live.find((r) => r.id === entry.recordId) : live.find((r) => r.type === config.type && typeof r.comment === "string" && r.comment.startsWith(marker));
+		if (entry && !onCf) drift.missingFromCloudflare.push({
+			logicalName: entry.logicalName,
+			derivedName: `${entry.recordType} ${entry.name}`,
+			cfId: entry.recordId
+		});
+		else if (onCf && !entry) drift.unrecordedInState.push({
+			logicalName: config.logicalName,
+			derivedName: `${config.type} ${onCf.name}`,
+			cfId: onCf.id
+		});
+		else if (!onCf && !entry) drift.undeployed.push({
+			logicalName: config.logicalName,
+			derivedName: `${config.type} ${config.name}`,
+			detail: stateKey
+		});
+	}
+	return drift;
+}
+
+//#endregion
+//#region src/core/drift/drift.types.ts
+function resourceDriftIsClean(d) {
+	return d.missingFromCloudflare.length === 0 && d.unrecordedInState.length === 0 && d.undeployed.length === 0;
+}
+function reportHasDrift(resources) {
+	return resources.some((d) => !resourceDriftIsClean(d));
+}
+
+//#endregion
+//#region src/core/drift/tenantDrift.ts
+/**
+* Drift for workspace tenants in {@link CfiState.tenants}: dispatch script and
+* recorded D1 shards must still exist on Cloudflare.
+*
+* `unrecordedInState` / `undeployed` are intentionally empty here — tenant
+* discovery from CF alone is heuristic until product/script naming is fully
+* pinned (`docs/scope-remaining.md` D-1).
+*/
+async function tenantDrift(state, api, allD1) {
+	const drift = {
+		kind: "tenant",
+		missingFromCloudflare: [],
+		unrecordedInState: [],
+		undeployed: []
+	};
+	const d1ById = new Map(allD1.map((d) => [d.uuid, d.name]));
+	const tenants = state.listTenants().filter((t) => t.provisioningStatus !== "tombstoned");
+	if (tenants.length === 0) return drift;
+	const scriptLists = /* @__PURE__ */ new Map();
+	async function scriptsInNs(ns) {
+		let set = scriptLists.get(ns);
+		if (!set) {
+			const list = await api.dispatchNamespaceScriptList(ns);
+			set = new Set(list.map((s) => s.id));
+			scriptLists.set(ns, set);
+		}
+		return set;
+	}
+	for (const t of tenants) {
+		const logical = tenantStateKey(t.product, t.workspace);
+		try {
+			if (!(await scriptsInNs(t.dispatchNamespaceName)).has(t.scriptName)) drift.missingFromCloudflare.push({
+				logicalName: logical,
+				derivedName: t.scriptName,
+				detail: "dispatch_script"
+			});
+		} catch {
+			drift.missingFromCloudflare.push({
+				logicalName: logical,
+				derivedName: t.dispatchNamespaceName,
+				detail: "dispatch_namespace_list_failed"
+			});
+		}
+		for (const shard of t.d1Shards ?? []) if (!d1ById.has(shard.cfId)) drift.missingFromCloudflare.push({
+			logicalName: logical,
+			derivedName: shard.derivedName,
+			cfId: shard.cfId,
+			detail: `d1:${shard.role}`
+		});
+	}
+	return drift;
+}
+
+//#endregion
+//#region src/cli/commands/drift.ts
+/**
+* Compute a read-only drift report for the given env.
+*
+* Compares Tamer state (D1 `tamer-state-{env}`) against the Cloudflare API
+* and the resources declared in `tamer.config.ts`. Reports three categories:
+*
+* - `missingFromCloudflare` — tracked in state but the CF resource is gone.
+* - `unrecordedInState` — exists on CF and matches a declared resource, but
+*   no state entry tracks it (e.g. created out-of-band; run `tamer sync`).
+* - `undeployed` — declared in this stack's config, present in neither
+*   state nor CF (run `tamer apply`).
+*
+* Pure: never writes to state. Returns the report so callers can choose how to
+* render or consume it.
+*/
+async function computeDriftReport(options) {
+	const env = options.env ?? "local";
+	const configPath = options.configPath;
+	const baseDir = process.cwd();
+	const config = await loadConfig(configPath, { env });
+	const accountId = config.account_id ?? cloudflareAccountIdFromEnv();
+	if (!accountId) throw new Error("account_id required in config or CLOUDFLARE_ACCOUNT_ID env var");
+	const api = new CFApiClient(accountId);
+	const naming = namingFromConfig(config);
+	const state = new StateManager(config.tenant.id, env, stackNameForConfig(config));
+	await state.hydrate(api);
+	const imports = await fetchStackImports(api, config, env).catch(() => ({}));
+	async function safeList(label, fn) {
+		try {
+			return await fn();
+		} catch (err) {
+			const msg = err instanceof Error ? err.message : String(err);
+			console.warn(`[drift] skipping ${label}: ${msg}`);
+			return [];
+		}
+	}
+	const lists = await Promise.all(resourceModules.map((m) => safeList(`${m.label} list`, () => m.fetchAll(api))));
+	const allDispatch = getDispatchNamespaces(config).length > 0 ? await safeList("dispatch namespaces", () => api.dispatchNamespaceListAll()) : [];
+	const allLogpushJobs = getLogpushJobs(config).length > 0 && env !== "local" ? await safeList("logpush jobs", () => api.logpushAccountJobsList()) : [];
+	const workers = await getWorkers(config, baseDir);
+	const aggregated = /* @__PURE__ */ new Map();
+	function merge(d) {
+		const existing = aggregated.get(d.kind);
+		if (!existing) {
+			aggregated.set(d.kind, d);
+			return;
+		}
+		existing.missingFromCloudflare.push(...d.missingFromCloudflare);
+		existing.unrecordedInState.push(...d.unrecordedInState);
+		existing.undeployed.push(...d.undeployed);
+	}
+	for (const [workerKey, workerConfig] of workers) {
+		const mergedWorker = mergeWorkerConfigForResourcePick(config, workerKey, workerConfig, env, accountId, naming, state, {
+			referencesMode: "tolerant",
+			imports
+		});
+		resourceModules.forEach((mod, i) => {
+			const resources = mod.pickResources(mergedWorker);
+			if (resources.length === 0) return;
+			merge(mod.drift({
+				resources,
+				all: lists[i],
+				tenant: config.tenant,
+				env,
+				api,
+				state,
+				naming,
+				config,
+				baseDir
+			}));
+		});
+	}
+	const dispatchResources = getDispatchNamespaces(config);
+	if (dispatchResources.length > 0) merge(dispatchNamespaceDrift(allDispatch, dispatchResources, env, config.tenant, state));
+	const dnsResources = getDnsRecords(config);
+	if (dnsResources.length > 0 && env !== "local") {
+		const byZone = /* @__PURE__ */ new Map();
+		const zones = Array.from(new Set(dnsResources.map((r) => r.zoneId)));
+		for (const zoneId of zones) {
+			const live = await safeList(`dns records (zone ${zoneId})`, () => api.zoneDnsRecordListAll(zoneId));
+			byZone.set(zoneId, live);
+		}
+		merge(dnsRecordDrift(byZone, dnsResources, config.tenant, env, state));
+	}
+	const logpushResources = getLogpushJobs(config);
+	if (logpushResources.length > 0 && env !== "local") merge(logpushJobDrift(allLogpushJobs, logpushResources, env, config.tenant, state));
+	if (state.listTenants().length > 0) {
+		const allD1Idx = resourceModules.findIndex((m) => m.kind === "d1");
+		merge(await tenantDrift(state, api, allD1Idx >= 0 ? lists[allD1Idx] : []));
+	}
+	const workerRouteReport = await workerRoutesDrift(env, config, baseDir, accountId, naming, state, api, { imports });
+	if (workerRouteReport) merge(workerRouteReport);
+	const workerScriptReport = await workersDrift(env, config, baseDir, accountId, naming, state, api, { imports });
+	if (workerScriptReport) merge(workerScriptReport);
+	const dedupedResources = Array.from(aggregated.values()).map((d) => ({
+		...d,
+		missingFromCloudflare: dedupe(d.missingFromCloudflare),
+		unrecordedInState: dedupe(d.unrecordedInState),
+		undeployed: dedupe(d.undeployed)
+	}));
+	return {
+		tenantId: config.tenant.id,
+		env,
+		generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		resources: dedupedResources,
+		hasDrift: reportHasDrift(dedupedResources)
+	};
+}
+function dedupe(list) {
+	const seen = /* @__PURE__ */ new Set();
+	const out = [];
+	for (const item of list) {
+		const key = `${item.logicalName}::${item.derivedName}`;
+		if (seen.has(key)) continue;
+		seen.add(key);
+		out.push(item);
+	}
+	return out;
+}
+/**
+* CLI entry point. Prints a human report (or JSON when `--json`) and sets a
+* non-zero process exit code when drift is found.
+*/
+async function runDrift(options) {
+	const report = await computeDriftReport({
+		env: options.env,
+		configPath: options.configPath
+	});
+	if (options.json) console.log(JSON.stringify(report, null, 2));
+	else printHumanReport(report);
+	return report.hasDrift ? 1 : 0;
+}
+function printHumanReport(report) {
+	console.log(`\nDrift report — tenant ${report.tenantId}, env ${report.env}\n`);
+	if (report.resources.length === 0) {
+		console.log("  (no managed resource kinds in this config)\n");
+		return;
+	}
+	for (const d of report.resources) {
+		const total = d.missingFromCloudflare.length + d.unrecordedInState.length + d.undeployed.length;
+		console.log(`${labelFor(d.kind)} (${total} drift):`);
+		if (total === 0) {
+			console.log("  ok");
+			continue;
+		}
+		if (d.missingFromCloudflare.length) {
+			console.log("  missing from Cloudflare (state references gone):");
+			for (const e of d.missingFromCloudflare) console.log(`    - ${e.logicalName} -> ${e.derivedName}${suffix(e.cfId)}`);
+		}
+		if (d.unrecordedInState.length) {
+			console.log("  unrecorded in state (run `tamer sync`):");
+			for (const e of d.unrecordedInState) console.log(`    - ${e.logicalName} -> ${e.derivedName}${suffix(e.cfId)}`);
+		}
+		if (d.undeployed.length) {
+			console.log("  undeployed (run `tamer apply`):");
+			for (const e of d.undeployed) console.log(`    - ${e.logicalName} -> ${e.derivedName}`);
+		}
+	}
+	console.log(report.hasDrift ? "\nDrift detected.\n" : "\nNo drift.\n");
+}
+const REGISTRY_LABELS = Object.fromEntries(resourceModules.map((m) => [m.kind, m.label]));
+function labelFor(kind) {
+	if (REGISTRY_LABELS[kind]) return REGISTRY_LABELS[kind];
+	switch (kind) {
+		case "dispatch_namespace": return "Dispatch namespaces";
+		case "logpush_job": return "Logpush jobs";
+		case "dns_record": return "DNS records";
+		case "tenant": return "Workspace tenants";
+		case "worker_route": return "HTTP routes (Workers Routes API)";
+		case "worker_script": return "Worker scripts";
+		default: return kind;
+	}
+}
+function suffix(cfId) {
+	return cfId ? ` [${cfId}]` : "";
+}
+
+//#endregion
+export { runDrift as n, computeDriftReport as t };
+//# sourceMappingURL=drift-D8ZrSgTn.mjs.map

package/dist/drift-D8ZrSgTn.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift-D8ZrSgTn.mjs","names":["drift: ResourceDrift","drift: ResourceDrift","drift: ResourceDrift","byZone: DnsRecordsByZone","out: T[]","REGISTRY_LABELS: Record<string, string>"],"sources":["../src/features/dispatch-namespace/dispatch-namespace.drift.ts","../src/features/dns-records/dns-records.drift.ts","../src/core/drift/drift.types.ts","../src/core/drift/tenantDrift.ts","../src/cli/commands/drift.ts"],"sourcesContent":["import type {\n  DispatchNamespaceResourceConfig,\n  DispatchNamespaceStateEntry,\n  TenantMeta,\n} from \"../../types.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { ResourceDrift } from \"../../core/drift/drift.types.js\";\nimport { effectiveDispatchNamespaceName } from \"./dispatch-namespace.resolve.js\";\n\ninterface CFDispatchNamespace {\n  namespace_name: string;\n}\n\nexport function dispatchNamespaceDrift(\n  allDispatch: CFDispatchNamespace[],\n  resources: DispatchNamespaceResourceConfig[],\n  env: string,\n  tenant: TenantMeta,\n  state: StateManager,\n): ResourceDrift {\n  const drift: ResourceDrift = {\n    kind: \"dispatch_namespace\",\n    missingFromCloudflare: [],\n    unrecordedInState: [],\n    undeployed: [],\n  };\n\n  const cfNames = new Set(allDispatch.map((d) => d.namespace_name));\n  const allState = state.getAll();\n  const nsState = Object.values(allState).filter(\n    (e): e is DispatchNamespaceStateEntry => e.type === \"dispatch_namespace\",\n  );\n\n  for (const config of resources) {\n    const derivedName = effectiveDispatchNamespaceName(config, env, tenant);\n    const stateEntry = nsState.find(\n      (e) => e.logicalName === config.logicalName && e.derivedName === derivedName,\n    );\n    const onCf = cfNames.has(derivedName);\n\n    if (stateEntry && !onCf) {\n      drift.missingFromCloudflare.push({\n        logicalName: stateEntry.logicalName,\n        derivedName: stateEntry.derivedName,\n      });\n    } else if (onCf && !stateEntry) {\n      drift.unrecordedInState.push({\n        logicalName: config.logicalName,\n        derivedName,\n      });\n    } else if (!onCf && !stateEntry) {\n      drift.undeployed.push({\n        logicalName: config.logicalName,\n        derivedName,\n      });\n    }\n  }\n\n  return drift;\n}\n","import type {\n  DnsRecordResourceConfig,\n  DnsRecordStateEntry,\n  TenantMeta,\n} from \"../../types.js\";\nimport type { StateManager } from \"../../core/state/StateManager.js\";\nimport type { ResourceDrift } from \"../../core/drift/drift.types.js\";\nimport {\n  dnsRecordAppliesToEnv,\n  dnsRecordCommentMarker,\n  dnsRecordStateKey,\n} from \"./dns-records.resolve.js\";\n\ninterface CFDnsRecord {\n  id: string;\n  type: string;\n  name: string;\n  content: string;\n  ttl?: number;\n  proxied?: boolean;\n  priority?: number;\n  comment?: string | null;\n}\n\n/**\n * Map of `zoneId → live records`. The drift caller pre-fetches because\n * other resource modules also iterate zones (worker routes), so we\n * accept the snapshot rather than refetching here.\n */\nexport type DnsRecordsByZone = Map<string, CFDnsRecord[]>;\n\nexport function dnsRecordDrift(\n  byZone: DnsRecordsByZone,\n  resources: DnsRecordResourceConfig[],\n  tenant: TenantMeta,\n  env: string,\n  state: StateManager,\n): ResourceDrift {\n  const drift: ResourceDrift = {\n    kind: \"dns_record\",\n    missingFromCloudflare: [],\n    unrecordedInState: [],\n    undeployed: [],\n  };\n\n  const stateRecords = Object.values(state.getAll()).filter(\n    (e): e is DnsRecordStateEntry => e.type === \"dns_record\",\n  );\n\n  for (const config of resources) {\n    if (!dnsRecordAppliesToEnv(config, env)) continue;\n    const live = byZone.get(config.zoneId) ?? [];\n    const marker = dnsRecordCommentMarker(tenant, env, config.logicalName);\n    const stateKey = dnsRecordStateKey(config.zoneId, config.type, config.name);\n    const entry = stateRecords.find(\n      (e) =>\n        e.zoneId === config.zoneId &&\n        e.recordType === config.type &&\n        e.logicalName === config.logicalName,\n    );\n    const onCf = entry\n      ? live.find((r) => r.id === entry.recordId)\n      : live.find(\n          (r) =>\n            r.type === config.type &&\n            typeof r.comment === \"string\" &&\n            r.comment.startsWith(marker),\n        );\n\n    if (entry && !onCf) {\n      drift.missingFromCloudflare.push({\n        logicalName: entry.logicalName,\n        derivedName: `${entry.recordType} ${entry.name}`,\n        cfId: entry.recordId,\n      });\n    } else if (onCf && !entry) {\n      drift.unrecordedInState.push({\n        logicalName: config.logicalName,\n        derivedName: `${config.type} ${onCf.name}`,\n        cfId: onCf.id,\n      });\n    } else if (!onCf && !entry) {\n      drift.undeployed.push({\n        logicalName: config.logicalName,\n        derivedName: `${config.type} ${config.name}`,\n        detail: stateKey,\n      });\n    }\n  }\n\n  return drift;\n}\n","/**\n * Read-only drift report comparing recorded state vs. Cloudflare reality vs.\n * the current `tamer.config.ts`.\n */\n\nexport type DriftKind =\n  | \"d1\"\n  | \"r2\"\n  | \"kv\"\n  | \"queue\"\n  | \"hyperdrive\"\n  | \"vectorize\"\n  | \"ai_gateway\"\n  | \"pipeline\"\n  | \"workflow\"\n  | \"secret_store\"\n  | \"dns_record\"\n  | \"dispatch_namespace\"\n  | \"logpush_job\"\n  | \"tenant\"\n  | \"worker_route\"\n  | \"worker_script\";\n\nexport interface DriftEntry {\n  /** Logical resource name from `tamer.config.ts`. */\n  logicalName: string;\n  /** Cloudflare-side name (or `(unknown)` when no CF or state side knows it). */\n  derivedName: string;\n  /** Cloudflare resource ID, when known (D1 uuid, KV id). */\n  cfId?: string;\n  /** Optional human-readable detail (e.g. shard date). */\n  detail?: string;\n}\n\nexport interface ResourceDrift {\n  kind: DriftKind;\n  /** Tracked in state but no longer present on Cloudflare. */\n  missingFromCloudflare: DriftEntry[];\n  /**\n   * Present on Cloudflare and matches a declared resource in this config,\n   * but no state entry tracks it (e.g. created out-of-band).\n   */\n  unrecordedInState: DriftEntry[];\n  /**\n   * Declared in this stack's config but neither tracked in state nor present\n   * on Cloudflare (run `tamer apply`).\n   */\n  undeployed: DriftEntry[];\n}\n\nexport interface DriftReport {\n  tenantId: string;\n  env: string;\n  generatedAt: string;\n  resources: ResourceDrift[];\n  /** True iff any of the three categories has at least one entry. */\n  hasDrift: boolean;\n}\n\nexport function resourceDriftIsClean(d: ResourceDrift): boolean {\n  return (\n    d.missingFromCloudflare.length === 0 &&\n    d.unrecordedInState.length === 0 &&\n    d.undeployed.length === 0\n  );\n}\n\nexport function reportHasDrift(resources: ResourceDrift[]): boolean {\n  return resources.some((d) => !resourceDriftIsClean(d));\n}\n","import type { CFApiClient } from \"../api/CFApiClient.js\";\nimport type { StateManager } from \"../state/StateManager.js\";\nimport type { ResourceDrift } from \"./drift.types.js\";\nimport { tenantStateKey } from \"../tenant/tenantKeys.js\";\n\ninterface CFD1 {\n  uuid: string;\n  name: string;\n}\n\n/**\n * Drift for workspace tenants in {@link CfiState.tenants}: dispatch script and\n * recorded D1 shards must still exist on Cloudflare.\n *\n * `unrecordedInState` / `undeployed` are intentionally empty here — tenant\n * discovery from CF alone is heuristic until product/script naming is fully\n * pinned (`docs/scope-remaining.md` D-1).\n */\nexport async function tenantDrift(\n  state: StateManager,\n  api: CFApiClient,\n  allD1: CFD1[],\n): Promise<ResourceDrift> {\n  const drift: ResourceDrift = {\n    kind: \"tenant\",\n    missingFromCloudflare: [],\n    unrecordedInState: [],\n    undeployed: [],\n  };\n\n  const d1ById = new Map(allD1.map((d) => [d.uuid, d.name]));\n  const tenants = state\n    .listTenants()\n    .filter((t) => t.provisioningStatus !== \"tombstoned\");\n  if (tenants.length === 0) return drift;\n\n  const scriptLists = new Map<string, Set<string>>();\n  async function scriptsInNs(ns: string): Promise<Set<string>> {\n    let set = scriptLists.get(ns);\n    if (!set) {\n      const list = await api.dispatchNamespaceScriptList(ns);\n      set = new Set(list.map((s) => s.id));\n      scriptLists.set(ns, set);\n    }\n    return set;\n  }\n\n  for (const t of tenants) {\n    const logical = tenantStateKey(t.product, t.workspace);\n    try {\n      const ids = await scriptsInNs(t.dispatchNamespaceName);\n      if (!ids.has(t.scriptName)) {\n        drift.missingFromCloudflare.push({\n          logicalName: logical,\n          derivedName: t.scriptName,\n          detail: \"dispatch_script\",\n        });\n      }\n    } catch {\n      drift.missingFromCloudflare.push({\n        logicalName: logical,\n        derivedName: t.dispatchNamespaceName,\n        detail: \"dispatch_namespace_list_failed\",\n      });\n    }\n\n    for (const shard of t.d1Shards ?? []) {\n      if (!d1ById.has(shard.cfId)) {\n        drift.missingFromCloudflare.push({\n          logicalName: logical,\n          derivedName: shard.derivedName,\n          cfId: shard.cfId,\n          detail: `d1:${shard.role}`,\n        });\n      }\n    }\n  }\n\n  return drift;\n}\n","import { loadConfig, getWorkers } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { namingFromConfig } from \"../../core/config/namingFromConfig.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport { dispatchNamespaceDrift } from \"../../features/dispatch-namespace/index.js\";\nimport {\n  dnsRecordDrift,\n  type DnsRecordsByZone,\n} from \"../../features/dns-records/index.js\";\nimport { getDispatchNamespaces, getDnsRecords, getLogpushJobs } from \"../../types.js\";\nimport { logpushJobDrift } from \"../../features/logpush-job/index.js\";\nimport type {\n  DriftReport,\n  ResourceDrift,\n} from \"../../core/drift/drift.types.js\";\nimport { reportHasDrift } from \"../../core/drift/drift.types.js\";\nimport { tenantDrift } from \"../../core/drift/tenantDrift.js\";\nimport { workerRoutesDrift } from \"../../features/worker-route/index.js\";\nimport { workersDrift } from \"../../features/workers/index.js\";\nimport { resourceModules } from \"../../core/registry/registry.js\";\nimport { fetchStackImports } from \"../../core/imports/fetchStackImports.js\";\nimport { mergeWorkerConfigForResourcePick } from \"../../core/config/resolver.js\";\n\n/**\n * Compute a read-only drift report for the given env.\n *\n * Compares Tamer state (D1 `tamer-state-{env}`) against the Cloudflare API\n * and the resources declared in `tamer.config.ts`. Reports three categories:\n *\n * - `missingFromCloudflare` — tracked in state but the CF resource is gone.\n * - `unrecordedInState` — exists on CF and matches a declared resource, but\n *   no state entry tracks it (e.g. created out-of-band; run `tamer sync`).\n * - `undeployed` — declared in this stack's config, present in neither\n *   state nor CF (run `tamer apply`).\n *\n * Pure: never writes to state. Returns the report so callers can choose how to\n * render or consume it.\n */\nexport async function computeDriftReport(options: {\n  env?: string;\n  configPath?: string;\n}): Promise<DriftReport> {\n  const env = options.env ?? \"local\";\n  const configPath = options.configPath;\n  const baseDir = process.cwd();\n\n  const config = await loadConfig(configPath, { env });\n  const accountId = config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n\n  const api = new CFApiClient(accountId);\n  const naming = namingFromConfig(config);\n  const state = new StateManager(\n    config.tenant.id,\n    env,\n    stackNameForConfig(config),\n  );\n  await state.hydrate(api);\n  // Tolerant pre-fetch keeps drift accurate when worker `tamerRoutes`\n  // depend on sibling-stack outputs (otherwise the placeholder pattern\n  // would never match anything CF returned).\n  const imports = await fetchStackImports(api, config, env).catch(() => ({}));\n\n  async function safeList<T>(\n    label: string,\n    fn: () => Promise<T[]>,\n  ): Promise<T[]> {\n    try {\n      return await fn();\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      console.warn(`[drift] skipping ${label}: ${msg}`);\n      return [];\n    }\n  }\n\n  const lists = await Promise.all(\n    resourceModules.map((m) =>\n      safeList(`${m.label} list`, () => m.fetchAll(api)),\n    ),\n  );\n\n  const allDispatch =\n    getDispatchNamespaces(config).length > 0\n      ? await safeList(\"dispatch namespaces\", () =>\n          api.dispatchNamespaceListAll(),\n        )\n      : [];\n\n  const allLogpushJobs =\n    getLogpushJobs(config).length > 0 && env !== \"local\"\n      ? await safeList(\"logpush jobs\", () => api.logpushAccountJobsList())\n      : [];\n\n  const workers = await getWorkers(config, baseDir);\n\n  const aggregated = new Map<string, ResourceDrift>();\n  function merge(d: ResourceDrift): void {\n    const existing = aggregated.get(d.kind);\n    if (!existing) {\n      aggregated.set(d.kind, d);\n      return;\n    }\n    existing.missingFromCloudflare.push(...d.missingFromCloudflare);\n    existing.unrecordedInState.push(...d.unrecordedInState);\n    existing.undeployed.push(...d.undeployed);\n  }\n\n  for (const [workerKey, workerConfig] of workers) {\n    const mergedWorker = mergeWorkerConfigForResourcePick(\n      config,\n      workerKey,\n      workerConfig,\n      env,\n      accountId,\n      naming,\n      state,\n      { referencesMode: \"tolerant\", imports },\n    );\n    resourceModules.forEach((mod, i) => {\n      const resources = mod.pickResources(mergedWorker);\n      if (resources.length === 0) return;\n      merge(\n        mod.drift({\n          resources,\n          all: lists[i],\n          tenant: config.tenant,\n          env,\n          api,\n          state,\n          naming,\n          config,\n          baseDir,\n        }),\n      );\n    });\n  }\n\n  const dispatchResources = getDispatchNamespaces(config);\n  if (dispatchResources.length > 0) {\n    merge(\n      dispatchNamespaceDrift(\n        allDispatch,\n        dispatchResources,\n        env,\n        config.tenant,\n        state,\n      ),\n    );\n  }\n\n  const dnsResources = getDnsRecords(config);\n  if (dnsResources.length > 0 && env !== \"local\") {\n    const byZone: DnsRecordsByZone = new Map();\n    const zones = Array.from(new Set(dnsResources.map((r) => r.zoneId)));\n    for (const zoneId of zones) {\n      const live = await safeList(`dns records (zone ${zoneId})`, () =>\n        api.zoneDnsRecordListAll(zoneId),\n      );\n      byZone.set(zoneId, live);\n    }\n    merge(dnsRecordDrift(byZone, dnsResources, config.tenant, env, state));\n  }\n\n  const logpushResources = getLogpushJobs(config);\n  if (logpushResources.length > 0 && env !== \"local\") {\n    merge(\n      logpushJobDrift(\n        allLogpushJobs,\n        logpushResources,\n        env,\n        config.tenant,\n        state,\n      ),\n    );\n  }\n\n  if (state.listTenants().length > 0) {\n    const allD1Idx = resourceModules.findIndex((m) => m.kind === \"d1\");\n    const allD1 =\n      allD1Idx >= 0\n        ? (lists[allD1Idx] as Array<{ uuid: string; name: string }>)\n        : [];\n    merge(await tenantDrift(state, api, allD1));\n  }\n\n  const workerRouteReport = await workerRoutesDrift(\n    env,\n    config,\n    baseDir,\n    accountId,\n    naming,\n    state,\n    api,\n    { imports },\n  );\n  if (workerRouteReport) merge(workerRouteReport);\n\n  const workerScriptReport = await workersDrift(\n    env,\n    config,\n    baseDir,\n    accountId,\n    naming,\n    state,\n    api,\n    { imports },\n  );\n  if (workerScriptReport) merge(workerScriptReport);\n\n  const dedupedResources = Array.from(aggregated.values()).map((d) => ({\n    ...d,\n    missingFromCloudflare: dedupe(d.missingFromCloudflare),\n    unrecordedInState: dedupe(d.unrecordedInState),\n    undeployed: dedupe(d.undeployed),\n  }));\n\n  return {\n    tenantId: config.tenant.id,\n    env,\n    generatedAt: new Date().toISOString(),\n    resources: dedupedResources,\n    hasDrift: reportHasDrift(dedupedResources),\n  };\n}\n\nfunction dedupe<T extends { logicalName: string; derivedName: string }>(\n  list: T[],\n): T[] {\n  const seen = new Set<string>();\n  const out: T[] = [];\n  for (const item of list) {\n    const key = `${item.logicalName}::${item.derivedName}`;\n    if (seen.has(key)) continue;\n    seen.add(key);\n    out.push(item);\n  }\n  return out;\n}\n\n/**\n * CLI entry point. Prints a human report (or JSON when `--json`) and sets a\n * non-zero process exit code when drift is found.\n */\nexport async function runDrift(options: {\n  env?: string;\n  configPath?: string;\n  json?: boolean;\n}): Promise<number> {\n  const report = await computeDriftReport({\n    env: options.env,\n    configPath: options.configPath,\n  });\n\n  if (options.json) {\n    console.log(JSON.stringify(report, null, 2));\n  } else {\n    printHumanReport(report);\n  }\n\n  return report.hasDrift ? 1 : 0;\n}\n\nfunction printHumanReport(report: DriftReport): void {\n  console.log(\n    `\\nDrift report — tenant ${report.tenantId}, env ${report.env}\\n`,\n  );\n  if (report.resources.length === 0) {\n    console.log(\"  (no managed resource kinds in this config)\\n\");\n    return;\n  }\n  for (const d of report.resources) {\n    const total =\n      d.missingFromCloudflare.length +\n      d.unrecordedInState.length +\n      d.undeployed.length;\n    console.log(`${labelFor(d.kind)} (${total} drift):`);\n    if (total === 0) {\n      console.log(\"  ok\");\n      continue;\n    }\n    if (d.missingFromCloudflare.length) {\n      console.log(\"  missing from Cloudflare (state references gone):\");\n      for (const e of d.missingFromCloudflare) {\n        console.log(`    - ${e.logicalName} -> ${e.derivedName}${suffix(e.cfId)}`);\n      }\n    }\n    if (d.unrecordedInState.length) {\n      console.log(\"  unrecorded in state (run `tamer sync`):\");\n      for (const e of d.unrecordedInState) {\n        console.log(`    - ${e.logicalName} -> ${e.derivedName}${suffix(e.cfId)}`);\n      }\n    }\n    if (d.undeployed.length) {\n      console.log(\"  undeployed (run `tamer apply`):\");\n      for (const e of d.undeployed) {\n        console.log(`    - ${e.logicalName} -> ${e.derivedName}`);\n      }\n    }\n  }\n  console.log(report.hasDrift ? \"\\nDrift detected.\\n\" : \"\\nNo drift.\\n\");\n}\n\nconst REGISTRY_LABELS: Record<string, string> = Object.fromEntries(\n  resourceModules.map((m) => [m.kind, m.label]),\n);\n\nfunction labelFor(kind: ResourceDrift[\"kind\"]): string {\n  if (REGISTRY_LABELS[kind]) return REGISTRY_LABELS[kind];\n  switch (kind) {\n    case \"dispatch_namespace\":\n      return \"Dispatch namespaces\";\n    case \"logpush_job\":\n      return \"Logpush jobs\";\n    case \"dns_record\":\n      return \"DNS records\";\n    case \"tenant\":\n      return \"Workspace tenants\";\n    case \"worker_route\":\n      return \"HTTP routes (Workers Routes API)\";\n    case \"worker_script\":\n      return \"Worker scripts\";\n    default:\n      return kind;\n  }\n}\n\nfunction suffix(cfId?: string): string {\n  return cfId ? ` [${cfId}]` : \"\";\n}\n"],"mappings":";;;;;;;;;;;AAaA,SAAgB,uBACd,aACA,WACA,KACA,QACA,OACe;CACf,MAAMA,QAAuB;EAC3B,MAAM;EACN,uBAAuB,EAAE;EACzB,mBAAmB,EAAE;EACrB,YAAY,EAAE;EACf;CAED,MAAM,UAAU,IAAI,IAAI,YAAY,KAAK,MAAM,EAAE,eAAe,CAAC;CACjE,MAAM,WAAW,MAAM,QAAQ;CAC/B,MAAM,UAAU,OAAO,OAAO,SAAS,CAAC,QACrC,MAAwC,EAAE,SAAS,qBACrD;AAED,MAAK,MAAM,UAAU,WAAW;EAC9B,MAAM,cAAc,+BAA+B,QAAQ,KAAK,OAAO;EACvE,MAAM,aAAa,QAAQ,MACxB,MAAM,EAAE,gBAAgB,OAAO,eAAe,EAAE,gBAAgB,YAClE;EACD,MAAM,OAAO,QAAQ,IAAI,YAAY;AAErC,MAAI,cAAc,CAAC,KACjB,OAAM,sBAAsB,KAAK;GAC/B,aAAa,WAAW;GACxB,aAAa,WAAW;GACzB,CAAC;WACO,QAAQ,CAAC,WAClB,OAAM,kBAAkB,KAAK;GAC3B,aAAa,OAAO;GACpB;GACD,CAAC;WACO,CAAC,QAAQ,CAAC,WACnB,OAAM,WAAW,KAAK;GACpB,aAAa,OAAO;GACpB;GACD,CAAC;;AAIN,QAAO;;;;;AC3BT,SAAgB,eACd,QACA,WACA,QACA,KACA,OACe;CACf,MAAMC,QAAuB;EAC3B,MAAM;EACN,uBAAuB,EAAE;EACzB,mBAAmB,EAAE;EACrB,YAAY,EAAE;EACf;CAED,MAAM,eAAe,OAAO,OAAO,MAAM,QAAQ,CAAC,CAAC,QAChD,MAAgC,EAAE,SAAS,aAC7C;AAED,MAAK,MAAM,UAAU,WAAW;AAC9B,MAAI,CAAC,sBAAsB,QAAQ,IAAI,CAAE;EACzC,MAAM,OAAO,OAAO,IAAI,OAAO,OAAO,IAAI,EAAE;EAC5C,MAAM,SAAS,uBAAuB,QAAQ,KAAK,OAAO,YAAY;EACtE,MAAM,WAAW,kBAAkB,OAAO,QAAQ,OAAO,MAAM,OAAO,KAAK;EAC3E,MAAM,QAAQ,aAAa,MACxB,MACC,EAAE,WAAW,OAAO,UACpB,EAAE,eAAe,OAAO,QACxB,EAAE,gBAAgB,OAAO,YAC5B;EACD,MAAM,OAAO,QACT,KAAK,MAAM,MAAM,EAAE,OAAO,MAAM,SAAS,GACzC,KAAK,MACF,MACC,EAAE,SAAS,OAAO,QAClB,OAAO,EAAE,YAAY,YACrB,EAAE,QAAQ,WAAW,OAAO,CAC/B;AAEL,MAAI,SAAS,CAAC,KACZ,OAAM,sBAAsB,KAAK;GAC/B,aAAa,MAAM;GACnB,aAAa,GAAG,MAAM,WAAW,GAAG,MAAM;GAC1C,MAAM,MAAM;GACb,CAAC;WACO,QAAQ,CAAC,MAClB,OAAM,kBAAkB,KAAK;GAC3B,aAAa,OAAO;GACpB,aAAa,GAAG,OAAO,KAAK,GAAG,KAAK;GACpC,MAAM,KAAK;GACZ,CAAC;WACO,CAAC,QAAQ,CAAC,MACnB,OAAM,WAAW,KAAK;GACpB,aAAa,OAAO;GACpB,aAAa,GAAG,OAAO,KAAK,GAAG,OAAO;GACtC,QAAQ;GACT,CAAC;;AAIN,QAAO;;;;;AC/BT,SAAgB,qBAAqB,GAA2B;AAC9D,QACE,EAAE,sBAAsB,WAAW,KACnC,EAAE,kBAAkB,WAAW,KAC/B,EAAE,WAAW,WAAW;;AAI5B,SAAgB,eAAe,WAAqC;AAClE,QAAO,UAAU,MAAM,MAAM,CAAC,qBAAqB,EAAE,CAAC;;;;;;;;;;;;;AClDxD,eAAsB,YACpB,OACA,KACA,OACwB;CACxB,MAAMC,QAAuB;EAC3B,MAAM;EACN,uBAAuB,EAAE;EACzB,mBAAmB,EAAE;EACrB,YAAY,EAAE;EACf;CAED,MAAM,SAAS,IAAI,IAAI,MAAM,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;CAC1D,MAAM,UAAU,MACb,aAAa,CACb,QAAQ,MAAM,EAAE,uBAAuB,aAAa;AACvD,KAAI,QAAQ,WAAW,EAAG,QAAO;CAEjC,MAAM,8BAAc,IAAI,KAA0B;CAClD,eAAe,YAAY,IAAkC;EAC3D,IAAI,MAAM,YAAY,IAAI,GAAG;AAC7B,MAAI,CAAC,KAAK;GACR,MAAM,OAAO,MAAM,IAAI,4BAA4B,GAAG;AACtD,SAAM,IAAI,IAAI,KAAK,KAAK,MAAM,EAAE,GAAG,CAAC;AACpC,eAAY,IAAI,IAAI,IAAI;;AAE1B,SAAO;;AAGT,MAAK,MAAM,KAAK,SAAS;EACvB,MAAM,UAAU,eAAe,EAAE,SAAS,EAAE,UAAU;AACtD,MAAI;AAEF,OAAI,EADQ,MAAM,YAAY,EAAE,sBAAsB,EAC7C,IAAI,EAAE,WAAW,CACxB,OAAM,sBAAsB,KAAK;IAC/B,aAAa;IACb,aAAa,EAAE;IACf,QAAQ;IACT,CAAC;UAEE;AACN,SAAM,sBAAsB,KAAK;IAC/B,aAAa;IACb,aAAa,EAAE;IACf,QAAQ;IACT,CAAC;;AAGJ,OAAK,MAAM,SAAS,EAAE,YAAY,EAAE,CAClC,KAAI,CAAC,OAAO,IAAI,MAAM,KAAK,CACzB,OAAM,sBAAsB,KAAK;GAC/B,aAAa;GACb,aAAa,MAAM;GACnB,MAAM,MAAM;GACZ,QAAQ,MAAM,MAAM;GACrB,CAAC;;AAKR,QAAO;;;;;;;;;;;;;;;;;;;;ACtCT,eAAsB,mBAAmB,SAGhB;CACvB,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,aAAa,QAAQ;CAC3B,MAAM,UAAU,QAAQ,KAAK;CAE7B,MAAM,SAAS,MAAM,WAAW,YAAY,EAAE,KAAK,CAAC;CACpD,MAAM,YAAY,OAAO,cAAc,4BAA4B;AACnE,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAGH,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,SAAS,iBAAiB,OAAO;CACvC,MAAM,QAAQ,IAAI,aAChB,OAAO,OAAO,IACd,KACA,mBAAmB,OAAO,CAC3B;AACD,OAAM,MAAM,QAAQ,IAAI;CAIxB,MAAM,UAAU,MAAM,kBAAkB,KAAK,QAAQ,IAAI,CAAC,aAAa,EAAE,EAAE;CAE3E,eAAe,SACb,OACA,IACc;AACd,MAAI;AACF,UAAO,MAAM,IAAI;WACV,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAQ,KAAK,oBAAoB,MAAM,IAAI,MAAM;AACjD,UAAO,EAAE;;;CAIb,MAAM,QAAQ,MAAM,QAAQ,IAC1B,gBAAgB,KAAK,MACnB,SAAS,GAAG,EAAE,MAAM,cAAc,EAAE,SAAS,IAAI,CAAC,CACnD,CACF;CAED,MAAM,cACJ,sBAAsB,OAAO,CAAC,SAAS,IACnC,MAAM,SAAS,6BACb,IAAI,0BAA0B,CAC/B,GACD,EAAE;CAER,MAAM,iBACJ,eAAe,OAAO,CAAC,SAAS,KAAK,QAAQ,UACzC,MAAM,SAAS,sBAAsB,IAAI,wBAAwB,CAAC,GAClE,EAAE;CAER,MAAM,UAAU,MAAM,WAAW,QAAQ,QAAQ;CAEjD,MAAM,6BAAa,IAAI,KAA4B;CACnD,SAAS,MAAM,GAAwB;EACrC,MAAM,WAAW,WAAW,IAAI,EAAE,KAAK;AACvC,MAAI,CAAC,UAAU;AACb,cAAW,IAAI,EAAE,MAAM,EAAE;AACzB;;AAEF,WAAS,sBAAsB,KAAK,GAAG,EAAE,sBAAsB;AAC/D,WAAS,kBAAkB,KAAK,GAAG,EAAE,kBAAkB;AACvD,WAAS,WAAW,KAAK,GAAG,EAAE,WAAW;;AAG3C,MAAK,MAAM,CAAC,WAAW,iBAAiB,SAAS;EAC/C,MAAM,eAAe,iCACnB,QACA,WACA,cACA,KACA,WACA,QACA,OACA;GAAE,gBAAgB;GAAY;GAAS,CACxC;AACD,kBAAgB,SAAS,KAAK,MAAM;GAClC,MAAM,YAAY,IAAI,cAAc,aAAa;AACjD,OAAI,UAAU,WAAW,EAAG;AAC5B,SACE,IAAI,MAAM;IACR;IACA,KAAK,MAAM;IACX,QAAQ,OAAO;IACf;IACA;IACA;IACA;IACA;IACA;IACD,CAAC,CACH;IACD;;CAGJ,MAAM,oBAAoB,sBAAsB,OAAO;AACvD,KAAI,kBAAkB,SAAS,EAC7B,OACE,uBACE,aACA,mBACA,KACA,OAAO,QACP,MACD,CACF;CAGH,MAAM,eAAe,cAAc,OAAO;AAC1C,KAAI,aAAa,SAAS,KAAK,QAAQ,SAAS;EAC9C,MAAMC,yBAA2B,IAAI,KAAK;EAC1C,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,aAAa,KAAK,MAAM,EAAE,OAAO,CAAC,CAAC;AACpE,OAAK,MAAM,UAAU,OAAO;GAC1B,MAAM,OAAO,MAAM,SAAS,qBAAqB,OAAO,UACtD,IAAI,qBAAqB,OAAO,CACjC;AACD,UAAO,IAAI,QAAQ,KAAK;;AAE1B,QAAM,eAAe,QAAQ,cAAc,OAAO,QAAQ,KAAK,MAAM,CAAC;;CAGxE,MAAM,mBAAmB,eAAe,OAAO;AAC/C,KAAI,iBAAiB,SAAS,KAAK,QAAQ,QACzC,OACE,gBACE,gBACA,kBACA,KACA,OAAO,QACP,MACD,CACF;AAGH,KAAI,MAAM,aAAa,CAAC,SAAS,GAAG;EAClC,MAAM,WAAW,gBAAgB,WAAW,MAAM,EAAE,SAAS,KAAK;AAKlE,QAAM,MAAM,YAAY,OAAO,KAH7B,YAAY,IACP,MAAM,YACP,EAAE,CACkC,CAAC;;CAG7C,MAAM,oBAAoB,MAAM,kBAC9B,KACA,QACA,SACA,WACA,QACA,OACA,KACA,EAAE,SAAS,CACZ;AACD,KAAI,kBAAmB,OAAM,kBAAkB;CAE/C,MAAM,qBAAqB,MAAM,aAC/B,KACA,QACA,SACA,WACA,QACA,OACA,KACA,EAAE,SAAS,CACZ;AACD,KAAI,mBAAoB,OAAM,mBAAmB;CAEjD,MAAM,mBAAmB,MAAM,KAAK,WAAW,QAAQ,CAAC,CAAC,KAAK,OAAO;EACnE,GAAG;EACH,uBAAuB,OAAO,EAAE,sBAAsB;EACtD,mBAAmB,OAAO,EAAE,kBAAkB;EAC9C,YAAY,OAAO,EAAE,WAAW;EACjC,EAAE;AAEH,QAAO;EACL,UAAU,OAAO,OAAO;EACxB;EACA,8BAAa,IAAI,MAAM,EAAC,aAAa;EACrC,WAAW;EACX,UAAU,eAAe,iBAAiB;EAC3C;;AAGH,SAAS,OACP,MACK;CACL,MAAM,uBAAO,IAAI,KAAa;CAC9B,MAAMC,MAAW,EAAE;AACnB,MAAK,MAAM,QAAQ,MAAM;EACvB,MAAM,MAAM,GAAG,KAAK,YAAY,IAAI,KAAK;AACzC,MAAI,KAAK,IAAI,IAAI,CAAE;AACnB,OAAK,IAAI,IAAI;AACb,MAAI,KAAK,KAAK;;AAEhB,QAAO;;;;;;AAOT,eAAsB,SAAS,SAIX;CAClB,MAAM,SAAS,MAAM,mBAAmB;EACtC,KAAK,QAAQ;EACb,YAAY,QAAQ;EACrB,CAAC;AAEF,KAAI,QAAQ,KACV,SAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,EAAE,CAAC;KAE5C,kBAAiB,OAAO;AAG1B,QAAO,OAAO,WAAW,IAAI;;AAG/B,SAAS,iBAAiB,QAA2B;AACnD,SAAQ,IACN,2BAA2B,OAAO,SAAS,QAAQ,OAAO,IAAI,IAC/D;AACD,KAAI,OAAO,UAAU,WAAW,GAAG;AACjC,UAAQ,IAAI,iDAAiD;AAC7D;;AAEF,MAAK,MAAM,KAAK,OAAO,WAAW;EAChC,MAAM,QACJ,EAAE,sBAAsB,SACxB,EAAE,kBAAkB,SACpB,EAAE,WAAW;AACf,UAAQ,IAAI,GAAG,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,UAAU;AACpD,MAAI,UAAU,GAAG;AACf,WAAQ,IAAI,OAAO;AACnB;;AAEF,MAAI,EAAE,sBAAsB,QAAQ;AAClC,WAAQ,IAAI,qDAAqD;AACjE,QAAK,MAAM,KAAK,EAAE,sBAChB,SAAQ,IAAI,SAAS,EAAE,YAAY,MAAM,EAAE,cAAc,OAAO,EAAE,KAAK,GAAG;;AAG9E,MAAI,EAAE,kBAAkB,QAAQ;AAC9B,WAAQ,IAAI,4CAA4C;AACxD,QAAK,MAAM,KAAK,EAAE,kBAChB,SAAQ,IAAI,SAAS,EAAE,YAAY,MAAM,EAAE,cAAc,OAAO,EAAE,KAAK,GAAG;;AAG9E,MAAI,EAAE,WAAW,QAAQ;AACvB,WAAQ,IAAI,oCAAoC;AAChD,QAAK,MAAM,KAAK,EAAE,WAChB,SAAQ,IAAI,SAAS,EAAE,YAAY,MAAM,EAAE,cAAc;;;AAI/D,SAAQ,IAAI,OAAO,WAAW,wBAAwB,gBAAgB;;AAGxE,MAAMC,kBAA0C,OAAO,YACrD,gBAAgB,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAC9C;AAED,SAAS,SAAS,MAAqC;AACrD,KAAI,gBAAgB,MAAO,QAAO,gBAAgB;AAClD,SAAQ,MAAR;EACE,KAAK,qBACH,QAAO;EACT,KAAK,cACH,QAAO;EACT,KAAK,aACH,QAAO;EACT,KAAK,SACH,QAAO;EACT,KAAK,eACH,QAAO;EACT,KAAK,gBACH,QAAO;EACT,QACE,QAAO;;;AAIb,SAAS,OAAO,MAAuB;AACrC,QAAO,OAAO,KAAK,KAAK,KAAK"}

package/dist/events-BSwGdkGj.mjs

@@ -0,0 +1,68 @@
+import { n as loadConfig } from "./loader-DP7yXqT6.mjs";
+import { n as cloudflareAccountIdFromEnv, t as CFApiClient } from "./CFApiClient-DhbyyV71.mjs";
+import { f as stackNameForConfig, t as StateManager } from "./StateManager-DTqtLLVX.mjs";
+
+//#region src/cli/commands/events.ts
+function formatDuration(startedAt, completedAt) {
+	if (!completedAt) return void 0;
+	const a = Date.parse(startedAt);
+	const b = Date.parse(completedAt);
+	if (!Number.isFinite(a) || !Number.isFinite(b) || b < a) return void 0;
+	const ms = b - a;
+	if (ms < 1e3) return `${ms}ms`;
+	return `${(ms / 1e3).toFixed(1)}s`;
+}
+function printOp(label, op) {
+	const dur = formatDuration(op.startedAt, op.completedAt);
+	console.log(`  [${label}] ${op.command}`);
+	console.log(`      started: ${op.startedAt}`);
+	if (op.completedAt) console.log(`    completed: ${op.completedAt}`);
+	if (dur) console.log(`     duration: ${dur}`);
+	if (op.detail) console.log(`       detail: ${op.detail}`);
+	if (op.errorMessage) console.log(`        error: ${op.errorMessage}`);
+	console.log();
+}
+/**
+* Read-only: print recent completed stack operations from D1 state
+* (`operationHistory`) plus any in-progress marker (`lastOperation`).
+*/
+async function runEvents(options) {
+	const env = options.env ?? "local";
+	const config = await loadConfig(options.configPath, { env });
+	const accountId = config.account_id ?? cloudflareAccountIdFromEnv();
+	if (!accountId) throw new Error("account_id required in config or CLOUDFLARE_ACCOUNT_ID env var");
+	const stackName = stackNameForConfig(config);
+	const api = new CFApiClient(accountId);
+	const state = new StateManager(config.tenant.id, env, stackName);
+	await state.hydrate(api);
+	const last = state.getLastOperation();
+	const inProgress = last?.status === "in_progress" ? last : void 0;
+	let history = state.getOperationHistory();
+	if (options.limit !== void 0) history = history.slice(0, options.limit);
+	if (options.json) {
+		const out = {
+			stackName,
+			env,
+			tenantId: config.tenant.id,
+			inProgress: inProgress ?? null,
+			history
+		};
+		console.log(JSON.stringify(out, null, 2));
+		return;
+	}
+	console.log(`\nStack events — ${config.tenant.name} (${config.tenant.slug}) — stack "${stackName}" env ${env}\n`);
+	if (inProgress) {
+		console.log("In progress:\n");
+		printOp("in_progress", inProgress);
+	}
+	if (history.length === 0) {
+		console.log(inProgress ? "(no completed operations in history yet)\n" : "No completed operations recorded in state yet.\n");
+		return;
+	}
+	console.log("Recent completed operations (newest first):\n");
+	for (const op of history) printOp(op.status, op);
+}
+
+//#endregion
+export { runEvents };
+//# sourceMappingURL=events-BSwGdkGj.mjs.map

package/dist/events-BSwGdkGj.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-BSwGdkGj.mjs","names":[],"sources":["../src/cli/commands/events.ts"],"sourcesContent":["import { loadConfig } from \"../../core/config/loader.js\";\nimport { cloudflareAccountIdFromEnv } from \"../../core/cloudflareEnv.js\";\nimport { StateManager } from \"../../core/state/StateManager.js\";\nimport { stackNameForConfig } from \"../../core/state/stackName.js\";\nimport { CFApiClient } from \"../../core/api/CFApiClient.js\";\nimport type { CfiOperationRecord } from \"../../types.js\";\n\nfunction formatDuration(\n  startedAt: string,\n  completedAt: string | undefined,\n): string | undefined {\n  if (!completedAt) return undefined;\n  const a = Date.parse(startedAt);\n  const b = Date.parse(completedAt);\n  if (!Number.isFinite(a) || !Number.isFinite(b) || b < a) return undefined;\n  const ms = b - a;\n  if (ms < 1000) return `${ms}ms`;\n  return `${(ms / 1000).toFixed(1)}s`;\n}\n\nfunction printOp(label: string, op: CfiOperationRecord): void {\n  const dur = formatDuration(op.startedAt, op.completedAt);\n  console.log(`  [${label}] ${op.command}`);\n  console.log(`      started: ${op.startedAt}`);\n  if (op.completedAt) {\n    console.log(`    completed: ${op.completedAt}`);\n  }\n  if (dur) console.log(`     duration: ${dur}`);\n  if (op.detail) console.log(`       detail: ${op.detail}`);\n  if (op.errorMessage) console.log(`        error: ${op.errorMessage}`);\n  console.log();\n}\n\n/**\n * Read-only: print recent completed stack operations from D1 state\n * (`operationHistory`) plus any in-progress marker (`lastOperation`).\n */\nexport async function runEvents(options: {\n  env?: string;\n  configPath?: string;\n  limit?: number;\n  json?: boolean;\n}): Promise<void> {\n  const env = options.env ?? \"local\";\n  const config = await loadConfig(options.configPath, { env });\n  const accountId =\n    config.account_id ?? cloudflareAccountIdFromEnv();\n  if (!accountId) {\n    throw new Error(\n      \"account_id required in config or CLOUDFLARE_ACCOUNT_ID env var\",\n    );\n  }\n  const stackName = stackNameForConfig(config);\n  const api = new CFApiClient(accountId);\n  const state = new StateManager(config.tenant.id, env, stackName);\n  await state.hydrate(api);\n\n  const last = state.getLastOperation();\n  const inProgress =\n    last?.status === \"in_progress\" ? last : undefined;\n  let history = state.getOperationHistory();\n  if (options.limit !== undefined) {\n    history = history.slice(0, options.limit);\n  }\n\n  if (options.json) {\n    const out = {\n      stackName,\n      env,\n      tenantId: config.tenant.id,\n      inProgress: inProgress ?? null,\n      history,\n    };\n    console.log(JSON.stringify(out, null, 2));\n    return;\n  }\n\n  console.log(\n    `\\nStack events — ${config.tenant.name} (${config.tenant.slug}) — stack \"${stackName}\" env ${env}\\n`,\n  );\n\n  if (inProgress) {\n    console.log(\"In progress:\\n\");\n    printOp(\"in_progress\", inProgress);\n  }\n\n  if (history.length === 0) {\n    console.log(\n      inProgress\n        ? \"(no completed operations in history yet)\\n\"\n        : \"No completed operations recorded in state yet.\\n\",\n    );\n    return;\n  }\n\n  console.log(\"Recent completed operations (newest first):\\n\");\n  for (const op of history) {\n    printOp(op.status, op);\n  }\n}\n"],"mappings":";;;;;AAOA,SAAS,eACP,WACA,aACoB;AACpB,KAAI,CAAC,YAAa,QAAO;CACzB,MAAM,IAAI,KAAK,MAAM,UAAU;CAC/B,MAAM,IAAI,KAAK,MAAM,YAAY;AACjC,KAAI,CAAC,OAAO,SAAS,EAAE,IAAI,CAAC,OAAO,SAAS,EAAE,IAAI,IAAI,EAAG,QAAO;CAChE,MAAM,KAAK,IAAI;AACf,KAAI,KAAK,IAAM,QAAO,GAAG,GAAG;AAC5B,QAAO,IAAI,KAAK,KAAM,QAAQ,EAAE,CAAC;;AAGnC,SAAS,QAAQ,OAAe,IAA8B;CAC5D,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,YAAY;AACxD,SAAQ,IAAI,MAAM,MAAM,IAAI,GAAG,UAAU;AACzC,SAAQ,IAAI,kBAAkB,GAAG,YAAY;AAC7C,KAAI,GAAG,YACL,SAAQ,IAAI,kBAAkB,GAAG,cAAc;AAEjD,KAAI,IAAK,SAAQ,IAAI,kBAAkB,MAAM;AAC7C,KAAI,GAAG,OAAQ,SAAQ,IAAI,kBAAkB,GAAG,SAAS;AACzD,KAAI,GAAG,aAAc,SAAQ,IAAI,kBAAkB,GAAG,eAAe;AACrE,SAAQ,KAAK;;;;;;AAOf,eAAsB,UAAU,SAKd;CAChB,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,SAAS,MAAM,WAAW,QAAQ,YAAY,EAAE,KAAK,CAAC;CAC5D,MAAM,YACJ,OAAO,cAAc,4BAA4B;AACnD,KAAI,CAAC,UACH,OAAM,IAAI,MACR,iEACD;CAEH,MAAM,YAAY,mBAAmB,OAAO;CAC5C,MAAM,MAAM,IAAI,YAAY,UAAU;CACtC,MAAM,QAAQ,IAAI,aAAa,OAAO,OAAO,IAAI,KAAK,UAAU;AAChE,OAAM,MAAM,QAAQ,IAAI;CAExB,MAAM,OAAO,MAAM,kBAAkB;CACrC,MAAM,aACJ,MAAM,WAAW,gBAAgB,OAAO;CAC1C,IAAI,UAAU,MAAM,qBAAqB;AACzC,KAAI,QAAQ,UAAU,OACpB,WAAU,QAAQ,MAAM,GAAG,QAAQ,MAAM;AAG3C,KAAI,QAAQ,MAAM;EAChB,MAAM,MAAM;GACV;GACA;GACA,UAAU,OAAO,OAAO;GACxB,YAAY,cAAc;GAC1B;GACD;AACD,UAAQ,IAAI,KAAK,UAAU,KAAK,MAAM,EAAE,CAAC;AACzC;;AAGF,SAAQ,IACN,oBAAoB,OAAO,OAAO,KAAK,IAAI,OAAO,OAAO,KAAK,aAAa,UAAU,QAAQ,IAAI,IAClG;AAED,KAAI,YAAY;AACd,UAAQ,IAAI,iBAAiB;AAC7B,UAAQ,eAAe,WAAW;;AAGpC,KAAI,QAAQ,WAAW,GAAG;AACxB,UAAQ,IACN,aACI,+CACA,mDACL;AACD;;AAGF,SAAQ,IAAI,gDAAgD;AAC5D,MAAK,MAAM,MAAM,QACf,SAAQ,GAAG,QAAQ,GAAG"}