@essential-apps/shopify-test-runner 1.0.0

package/dist/scripts/runVmAuth.js

@@ -0,0 +1,475 @@
+#!/usr/bin/env node
+/**
+ * One-time interactive Shopify auth capture inside a VM.
+ *
+ * Why this exists: online tests run inside an HVF arm64
+ * microVM (via supermachine HVF) with chromium under a virtual Xvfb display. There's no way
+ * to interactively log in to Shopify from outside the VM, but the
+ * captured storage state (cookies — Partners session AND, crucially,
+ * Cloudflare's `cf_clearance` Turnstile-bypass cookie) needs to be
+ * captured INSIDE that same VM so the browser fingerprint matches at
+ * test time. Captures from the macOS host (different UA, different
+ * canvas/WebGL hashes) trigger CF re-challenge.
+ *
+ * Flow:
+ *   1. Bake / acquire the same VM the online suite uses (same image,
+ *      same warmupTag → reuses the snapshot — warm acquires are
+ *      ~3 s instead of ~4 min cold bake).
+ *   2. Mount the workspace so storageState.json writes land on the
+ *      host filesystem.
+ *   3. Start x11vnc inside the guest, bound to 0.0.0.0:5900.
+ *   4. Forward host 127.0.0.1:5900 → guest:5900 via vm.exposeTcp.
+ *   5. Open macOS Screen Sharing pointed at vnc://localhost:5900.
+ *   6. Spawn captureAuth.js inside the guest. It opens chrome on
+ *      DISPLAY=:99, navigates to accounts.shopify.com/lookup, and
+ *      waits for a host-side Enter keystroke.
+ *   7. User logs in via VNC, ALSO visits the test store admin to
+ *      pass any Turnstile (so cf_clearance gets captured), then
+ *      hits Enter in the host terminal.
+ *   8. captureAuth writes storageState.json (via the mounted
+ *      workspace → host disk), then exits. We release the VM.
+ *
+ * Usage (one-time per developer machine, or when cf_clearance / the
+ * Partner session expires):
+ *
+ *   npm run test:online:auth
+ *
+ * macOS Screen Sharing opens automatically. If it doesn't, run
+ * `open vnc://localhost:5900` manually. VNC password is "test" by
+ * default; override with TEST_ONLINE_VNC_PASSWORD.
+ *
+ * Supersedes runDockerAuth.ts (libkrun-based; we no longer use
+ * libkrun for any test path).
+ */
+import { existsSync, mkdirSync, readFileSync } from 'node:fs';
+import { homedir, platform as osPlatform } from 'node:os';
+import { resolve } from 'node:path';
+import { spawn as nodeSpawn } from 'node:child_process';
+import { setTimeout as sleep } from 'node:timers/promises';
+import { prepareOciArchive, envFileArgs } from '@essential-apps/shopify-test-core';
+const repoRoot = process.cwd();
+const VNC_PORT = 5900;
+/**
+ * Resolve the VM image source the same way runVm.ts
+ * does. Without this, the VM runtime treats TEST_ONLINE_VM_IMAGE as
+ * a Docker Hub registry ref and tries to pull it — which 401s for
+ * locally-built `container build` images that never went to a
+ * registry. oci-archive mode is the only one that works for the
+ * Apple-`container`-built images we actually use.
+ */
+async function imageSourceOptions() {
+    const mode = process.env['TEST_ONLINE_VM_IMAGE_SOURCE'] ?? 'oci-archive';
+    if (mode === 'registry')
+        return {};
+    const ref = process.env['TEST_ONLINE_VM_IMAGE'] ??
+        'essential-apps/shopify-test-vm:latest';
+    if (mode === 'oci-archive') {
+        const prep = await prepareOciArchive(ref);
+        if (prep.freshlySaved) {
+            console.error(`[runVmAuth] saved ${ref} → ${prep.archivePath} (${(prep.sizeBytes / 1024 / 1024).toFixed(1)} MB)`);
+        }
+        return { source: 'oci-archive', sourcePath: prep.archivePath };
+    }
+    if (mode === 'oci-layout') {
+        const sourcePath = process.env['TEST_ONLINE_VM_IMAGE_LAYOUT_PATH'];
+        if (!sourcePath) {
+            throw new Error(`TEST_ONLINE_VM_IMAGE_SOURCE=oci-layout requires TEST_ONLINE_VM_IMAGE_LAYOUT_PATH`);
+        }
+        return { source: 'oci-layout', sourcePath };
+    }
+    throw new Error(`TEST_ONLINE_VM_IMAGE_SOURCE=${mode} not recognised. Valid: oci-archive | oci-layout | registry`);
+}
+function readAppName() {
+    const pkgPath = resolve(repoRoot, 'package.json');
+    if (!existsSync(pkgPath)) {
+        throw new Error(`No package.json at ${pkgPath}. Run this from the consuming app's repo root.`);
+    }
+    const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+    if (!pkg.name)
+        throw new Error(`package.json at ${pkgPath} has no \`name\` field.`);
+    return pkg.name.replace(/^@[^/]+\//, '');
+}
+async function main() {
+    const appName = readAppName();
+    // Same node_modules volume + tarball-manifest extraFile as
+    // runVm.ts. Sharing both means auth-capture and online
+    // tests use the SAME snapshot (same warmupTag), so a single bake
+    // serves both flows.
+    const linuxModulesVolume = process.env['TEST_LINUX_NODE_MODULES_VOLUME'] ??
+        resolve(homedir(), `.cache/${appName}-test/node_modules.img`);
+    mkdirSync(resolve(linuxModulesVolume, '..'), { recursive: true });
+    const tarballManifest = resolve(repoRoot, 'vendor/essential-apps-shopify-test/.tarball-manifest');
+    const tarballManifestExists = existsSync(tarballManifest);
+    const vncPassword = process.env['TEST_ONLINE_VNC_PASSWORD'] ?? 'test';
+    const ref = process.env['TEST_ONLINE_VM_IMAGE'] ?? 'essential-apps/shopify-test-vm:latest';
+    // amd64+Rosetta is the only path that has real Google Chrome
+    // installed (the Dockerfile installs google-chrome-stable amd64);
+    // we want real Chrome here so the captured fingerprint matches
+    // what online tests use (channel: 'chrome' via TEST_FORCE_REAL_CHROME,
+    // OR patchright bundled chromium — both run on this image).
+    const platform = process.env['TEST_ONLINE_VM_PLATFORM'] ?? 'linux/arm64';
+    console.error(`[runVmAuth] baking image…`);
+    const tBake = performance.now();
+    const { Image } = await import('@supermachine/core');
+    const imageOpts = await imageSourceOptions();
+    // Same warmup pattern as runVm.ts so this bake hits the
+    // existing snapshot (warmupTag must match). If runVm has
+    // never run cold yet, this will trigger that warmup — ~4 min once.
+    const image = await Image.build({
+        ref,
+        memoryMib: Number(process.env['TEST_ONLINE_VM_MEMORY_MIB'] ?? 8192),
+        vcpus: Number(process.env['TEST_ONLINE_VM_VCPUS'] ?? 4),
+        cmd: ['sleep', 'infinity'],
+        env: { SKIP_OFFLINE_HOST_HIJACK: '1' },
+        platform,
+        mounts: [
+            // VM runtime 0.7.28+ requires explicit guestPath and
+            // auto-mounts at boot before warmup fires.
+            { hostPath: repoRoot, guestTag: 'workspace', guestPath: '/workspace' },
+        ],
+        volumes: [
+            {
+                hostPath: linuxModulesVolume,
+                guestPath: '/workspace/node_modules',
+                sizeMib: 4096,
+            },
+        ],
+        extraFiles: tarballManifestExists
+            ? [
+                { hostPath: tarballManifest, guestPath: '/etc/.shopify-test-tarball-manifest' },
+            ]
+            : [],
+        // Independent auth-capture snapshot. (Despite the historical name
+        // this no longer shares runVm.ts's tag — that moved to
+        // `online-v15-<runtime>-<manifest>`.) This rarely-run flow keys on a
+        // static tag rather than auto-folding the @supermachine/core runtime
+        // version like the main runners, so bump it on warmup-script OR VM
+        // runtime changes. Bumped v3→v4 for the 0.7.62 runtime adoption.
+        warmupTag: 'online-v4',
+        // @ts-expect-error — @supermachine/core's BuildOptions type
+        // doesn't declare `warmup`, but the runtime accepts it. Tracked
+        // upstream; fix-or-augment when the types catch up.
+        warmup: async (vm) => {
+            const r = await vm.exec({
+                argv: [
+                    'sh',
+                    '-c',
+                    `
+          echo "[warmup] >>> ENTERED warmup callback at \$(date +%H:%M:%S.%N)"
+          set -e
+          # VM runtime 0.7.28+ auto-mounts /workspace +
+          # /workspace/node_modules BEFORE warmup fires. Keep the
+          # defence-in-depth virtiofs check so a future auto-mount
+          # regression can't let rm-rf nuke the host bind.
+          NM_FS=\$(stat -f -c %T /workspace/node_modules 2>/dev/null || stat --file-system --format=%T /workspace/node_modules)
+          echo "[warmup] /workspace/node_modules FS type: \$NM_FS"
+          if [ "\$NM_FS" = "virtiofs" ] || [ "\$NM_FS" = "fuse.virtiofs" ]; then
+            echo "FATAL: /workspace/node_modules is \$NM_FS — auto-mount broken"
+            grep ' /workspace' /proc/mounts
+            exit 1
+          fi
+          chown -R postgres:postgres /var/lib/postgresql/data
+          chmod 700 /var/lib/postgresql/data
+          mkdir -p /var/run/postgresql
+          chown postgres:postgres /var/run/postgresql
+          chmod 775 /var/run/postgresql
+          cd /workspace
+          # Fresh install every rebake (tarball-manifest hash
+          # invalidates the snapshot when tarballs change). Wiping
+          # before install ensures stale tarballs can't linger.
+          rm -rf node_modules/* node_modules/.[!.]* 2>/dev/null || true
+          # Don't pipe npm to "tail" — the pipeline status is tail's,
+          # masking npm failures under "set -e", so a transient install
+          # error would bake a half-installed node_modules cache that
+          # warm restores then reuse. Check npm's own status so a failed
+          # install aborts the bake (no cache poisoned, next run rebakes).
+          if ! npm install --legacy-peer-deps --engine-strict=false > /tmp/npm-install.log 2>&1; then
+            echo "--- npm install FAILED - last 40 lines ---"
+            tail -40 /tmp/npm-install.log
+            exit 1
+          fi
+          tail -30 /tmp/npm-install.log
+          if ! grep -q "^127.0.0.1.*localhost" /etc/hosts; then
+            echo "127.0.0.1 localhost" >> /etc/hosts
+            echo "::1 localhost" >> /etc/hosts
+          fi
+        `,
+                ],
+                timeoutMs: 15 * 60 * 1000,
+            });
+            if (r.exitCode !== 0) {
+                console.error('[runVmAuth.warmup] failed:', r.stdout.toString(), r.stderr.toString());
+                throw new Error(`warmup failed (exit ${r.exitCode})`);
+            }
+        },
+        ...imageOpts,
+    });
+    console.error(`[runVmAuth] bake: ${((performance.now() - tBake) / 1000).toFixed(1)} s`);
+    const pool = await image.pool({ min: 1, max: 1, restoreOnRelease: false });
+    const vm = await pool.acquire();
+    // Loose typing so we can call signal/writeStdin/readStdout/etc.
+    // without re-importing the full @supermachine/core types tree (vendor name).
+    let forwarder = null;
+    let captureChild = null;
+    // Idempotent cleanup. Two design constraints:
+    //   1. SIGINT may fire multiple times (user hammers Ctrl-C), and
+    //      cleanup() is async — a second invocation would otherwise
+    //      race the first, calling signal/wait on already-disposed
+    //      handles ("agent closed connection before sending EXIT").
+    //   2. Each step may throw on second call (already-closed sockets,
+    //      already-released vm, etc.) — wrap individually so a later
+    //      step still runs even if an earlier one's idempotency check
+    //      threw something the catch missed.
+    // Implementation: a singleton promise — first caller does the
+    // work, every subsequent caller awaits the same promise.
+    let cleanupPromise = null;
+    const cleanup = () => {
+        if (cleanupPromise)
+            return cleanupPromise;
+        cleanupPromise = (async () => {
+            // Null each handle out after using it so a stray reference
+            // elsewhere can't be re-used.
+            const child = captureChild;
+            captureChild = null;
+            if (child)
+                await child.signal(15).catch(() => undefined);
+            const fwd = forwarder;
+            forwarder = null;
+            if (fwd)
+                await fwd.stop().catch(() => undefined);
+            await vm.release().catch(() => undefined);
+            await pool.shutdown().catch(() => undefined);
+        })();
+        return cleanupPromise;
+    };
+    // SIGINT / SIGTERM teardown — without these, Ctrl-C leaves the VM
+    // pinned and the next bake hits "snapshot in use" errors.
+    // First signal triggers cleanup + clean exit; second signal escalates
+    // to immediate process.exit so the user can always bail out.
+    let signalCount = 0;
+    const onSignal = (sig) => {
+        signalCount += 1;
+        if (signalCount >= 2) {
+            console.error(`\n[runVmAuth] received ${sig} again — forcing exit`);
+            process.exit(130);
+        }
+        console.error(`\n[runVmAuth] received ${sig}, cleaning up…`);
+        cleanup()
+            .catch(() => undefined)
+            .finally(() => process.exit(130));
+    };
+    process.on('SIGINT', onSignal);
+    process.on('SIGTERM', onSignal);
+    try {
+        // 0) Post-restore sanity. VM runtime 0.7.28+ captures the
+        //    auto-mount tree in the snapshot, so /workspace and
+        //    /workspace/node_modules are already mounted on restore.
+        //    Assert + bail if anything's off.
+        const mountR = await vm.exec({
+            argv: ['sh', '-c', `
+        mountpoint -q /workspace || { echo "FATAL: /workspace not mounted"; exit 1; }
+        mountpoint -q /workspace/node_modules || { echo "FATAL: /workspace/node_modules not mounted"; exit 1; }
+        NM_FS=\$(stat -f -c %T /workspace/node_modules 2>/dev/null)
+        if [ "\$NM_FS" = "virtiofs" ] || [ "\$NM_FS" = "fuse.virtiofs" ]; then
+          echo "FATAL: /workspace/node_modules is \$NM_FS — auto-mount layering broken"
+          exit 1
+        fi
+        ls /workspace/node_modules/@essential-apps/shopify-test-runner/dist/scripts/captureAuth.js >/dev/null \
+          || { echo "FATAL: captureAuth.js missing in volume — snapshot/volume out of sync"; exit 1; }
+      `],
+            timeoutMs: 10_000,
+        });
+        if (mountR.exitCode !== 0) {
+            console.error(`[runVmAuth] mount failed:\n${mountR.stdout.toString()}${mountR.stderr.toString()}`);
+            throw new Error('mount setup failed');
+        }
+        // 1) Start x11vnc inside the guest. The image's entrypoint.sh
+        //    has the same logic gated on TEST_ONLINE_VNC=1, but that env is
+        //    bake-time only (already snapshotted). Running x11vnc here
+        //    sidesteps the need for a separate baked snapshot.
+        console.error(`[runVmAuth] starting x11vnc on guest :5900…`);
+        const vncStart = await vm.exec({
+            argv: [
+                'bash',
+                '-c',
+                `
+        # No set -e — too many of these commands have valid nonzero
+        # exits (pkill matching 0 procs, rm-of-missing-file, etc.) and
+        # masking them all with || true was both noisy and unreliable.
+        # We explicitly check exit conditions on the things that
+        # matter (Xvfb socket present, x11vnc listening).
+        # Restart Xvfb on :99 with -ac (disable X access control)
+        # so x11vnc — which runs in a fresh shell here, separate from
+        # the entrypoint shell that started the original Xvfb — can
+        # attach without an Xauthority cookie. The entrypoint's Xvfb
+        # is fine for Playwright (which sets DISPLAY=:99 and inherits
+        # the auth context from the same shell), but x11vnc launched
+        # via a separate vm.exec doesn't have that.
+        echo "[xvfb] stopping any existing Xvfb on :99…"
+        # IMPORTANT: do NOT use 'pkill -f' here — the -f flag matches
+        # the full command line, and our own bash script's argv
+        # contains the literal string we'd search for (it's an
+        # embedded heredoc), so pkill would kill its own parent
+        # shell. Match by process name only.
+        pkill -x Xvfb 2>/dev/null || true
+        rm -f /tmp/.X11-unix/X99 /tmp/.X99-lock
+        sleep 0.3
+        # -ac: disable access control (no auth required). Safe inside
+        # the VM — only x11vnc here is going to connect, and x11vnc's
+        # own VNC auth (-rfbauth) gates external access.
+        # -nolisten tcp: still no TCP listener on Xvfb itself.
+        echo "[xvfb] starting Xvfb :99 -ac …"
+        nohup Xvfb :99 -screen 0 1600x1000x24 -nolisten tcp -ac \
+          >/var/log/xvfb.log 2>&1 &
+        for _ in $(seq 1 50); do
+          [ -e /tmp/.X11-unix/X99 ] && break
+          sleep 0.1
+        done
+        if [ ! -e /tmp/.X11-unix/X99 ]; then
+          echo "[xvfb] FAILED to bind /tmp/.X11-unix/X99 within 5s"
+          cat /var/log/xvfb.log
+          exit 1
+        fi
+        echo "[xvfb] up."
+
+        mkdir -p /root/.vnc
+        x11vnc -storepasswd "${vncPassword}" /root/.vnc/passwd >/dev/null 2>&1
+        # Background via shell (&) not x11vnc's -bg (which has been
+        # observed to fork before the accept loop binds). nohup so
+        # the listener survives this exec call returning.
+        echo "[x11vnc] starting on :${VNC_PORT}…"
+        nohup x11vnc -display :99 -forever -shared \
+          -rfbauth /root/.vnc/passwd -rfbport ${VNC_PORT} -quiet \
+          >/var/log/x11vnc.log 2>&1 &
+        VNC_PID=$!
+        echo "[x11vnc] pid $VNC_PID"
+        # Verify the listener actually bound. Use netstat (from
+        # net-tools — installed in both the vm and libkrun
+        # images per the Dockerfiles). bash /dev/tcp was tried first
+        # but ubuntu/jammy bash sometimes ships without the
+        # /dev/tcp/* virtual device enabled, leading to silent probe
+        # failures even when x11vnc IS listening.
+        for _ in $(seq 1 30); do
+          if netstat -ltn 2>/dev/null | grep -q ":${VNC_PORT} "; then
+            exit 0
+          fi
+          sleep 0.1
+        done
+        echo "x11vnc didn't bind :${VNC_PORT} within 3s"
+        echo "--- netstat output ---"
+        netstat -ltn 2>&1 || echo "(netstat unavailable)"
+        echo "--- x11vnc log ---"
+        cat /var/log/x11vnc.log
+        exit 1
+      `,
+            ],
+            timeoutMs: 15_000,
+        });
+        if (vncStart.exitCode !== 0) {
+            console.error('[runVmAuth] x11vnc failed:', vncStart.stdout.toString(), vncStart.stderr.toString());
+            throw new Error('x11vnc startup failed');
+        }
+        // 2) Forward host 127.0.0.1:5900 → guest :5900 so the macOS
+        //    Screen Sharing client can reach the VNC server.
+        forwarder = await vm.exposeTcp(VNC_PORT, VNC_PORT);
+        console.error(`[runVmAuth] forwarding host 127.0.0.1:${VNC_PORT} → guest :${VNC_PORT}`);
+        // 3) Open macOS Screen Sharing pointed at the forwarder. Detach
+        //    so the parent process can carry on.
+        if (osPlatform() === 'darwin') {
+            console.error(`[runVmAuth] VNC password (paste into Screen Sharing): ${vncPassword}`);
+            // Tiny delay so x11vnc accept-loop is warm before the client
+            // dials; otherwise Screen Sharing sometimes shows "connection
+            // refused" and the user has to retry.
+            await sleep(500);
+            // Embed the password in the URL (vnc://:<pw>@host) so macOS Screen
+            // Sharing connects WITHOUT prompting — prefilled, not typed. URL-encode
+            // in case TEST_ONLINE_VNC_PASSWORD has reserved chars.
+            const vncUrl = `vnc://:${encodeURIComponent(vncPassword)}@localhost:${VNC_PORT}`;
+            console.error(`[runVmAuth] Opening macOS Screen Sharing → vnc://localhost:${VNC_PORT} (password prefilled)`);
+            console.error(`[runVmAuth] (If nothing opens: open '${vncUrl}')`);
+            nodeSpawn('open', [vncUrl], {
+                stdio: 'ignore',
+                detached: true,
+            }).unref();
+        }
+        else {
+            console.error(`[runVmAuth] Connect any VNC viewer to localhost:${VNC_PORT} (password: ${vncPassword}).`);
+        }
+        // 4) Spawn captureAuth.js inside the guest. It opens Chrome on
+        //    DISPLAY=:99, prompts for Enter on stdin, then writes
+        //    storageState.json (which lands on host disk via the
+        //    workspace mount). We bridge host stdin to the guest child
+        //    so the user's Enter keystroke reaches captureAuth's
+        //    readline prompt.
+        console.error('');
+        console.error('━'.repeat(72));
+        console.error('Inside Screen Sharing:');
+        console.error('  1. Log in to Shopify Partners (accounts.shopify.com/lookup).');
+        console.error('  2. Then visit your test store admin');
+        console.error('     (e.g. https://admin.shopify.com/store/<your-store>).');
+        console.error('     If a Cloudflare "Verify you are human" page appears,');
+        console.error('     click through it. Without this step, cf_clearance');
+        console.error('     never lands in storageState and tests will still hit');
+        console.error('     Turnstile.');
+        console.error('  3. Return here and press Enter to save & exit.');
+        console.error('━'.repeat(72));
+        console.error('');
+        captureChild = await vm.spawn({
+            argv: [
+                'sh',
+                '-c',
+                // tty=false here (no PTY) because we want the readline prompt
+                // to read from a plain stdin pipe — Chrome doesn't care, it
+                // reads DISPLAY from env.
+                `cd /workspace && DISPLAY=:99 TEST_IN_CONTAINER=true node ${envFileArgs(repoRoot)} node_modules/@essential-apps/shopify-test-runner/dist/scripts/captureAuth.js`,
+            ],
+            env: { DISPLAY: ':99', TEST_IN_CONTAINER: 'true' },
+        });
+        // Bridge host stdin → guest captureAuth stdin (for the Enter
+        // prompt). Forwarder runs until the guest child exits.
+        process.stdin.setEncoding('utf8');
+        process.stdin.on('data', (chunk) => {
+            const buf = typeof chunk === 'string' ? Buffer.from(chunk, 'utf8') : chunk;
+            captureChild.writeStdin(buf).catch(() => undefined);
+        });
+        process.stdin.resume();
+        // Stream guest stdout/stderr to host for visibility.
+        const streamGuest = async (reader, out) => {
+            if (!reader)
+                return;
+            // eslint-disable-next-line no-constant-condition
+            while (true) {
+                const chunk = await reader().catch(() => null);
+                if (!chunk || chunk.length === 0)
+                    return;
+                out.write(chunk);
+            }
+        };
+        // captureChild has readStdout / readStderr — both Promise<Buffer>
+        // chunks until EOF (zero-length).
+        const childAny = captureChild;
+        void streamGuest(childAny.readStdout, process.stdout);
+        void streamGuest(childAny.readStderr, process.stderr);
+        const result = await (childAny.wait?.() ?? Promise.resolve({ exitCode: 0 }));
+        if (result.exitCode === 0) {
+            console.error('');
+            console.error('[runVmAuth] ✓ captureAuth completed successfully.');
+            console.error('[runVmAuth] storageState.json written via workspace mount.');
+        }
+        else {
+            console.error(`[runVmAuth] captureAuth exited with code ${result.exitCode}`);
+        }
+        await cleanup();
+        process.exit(result.exitCode);
+    }
+    catch (err) {
+        console.error('[runVmAuth] fatal:', err.message);
+        await cleanup();
+        process.exit(1);
+    }
+}
+main().catch(async (err) => {
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=runVmAuth.js.map

package/dist/scripts/runVmAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runVmAuth.js","sourceRoot":"","sources":["../../src/scripts/runVmAuth.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAEnF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC;AAEtB;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,aAAa,CAAC;IACzE,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACnC,uCAAuC,CAAC;IAC1C,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CACX,qBAAqB,GAAG,MAAM,IAAI,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CACnG,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,6DAA6D,CACjG,CAAC;AACJ,CAAC;AAMD,SAAS,WAAW;IAClB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,sBAAsB,OAAO,gDAAgD,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAgB,CAAC;IACrE,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,yBAAyB,CAAC,CAAC;IACpF,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,2DAA2D;IAC3D,uDAAuD;IACvD,iEAAiE;IACjE,qBAAqB;IACrB,MAAM,kBAAkB,GACtB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;QAC7C,OAAO,CAAC,OAAO,EAAE,EAAE,UAAU,OAAO,wBAAwB,CAAC,CAAC;IAChE,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,OAAO,CAC7B,QAAQ,EACR,sDAAsD,CACvD,CAAC;IACF,MAAM,qBAAqB,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAE1D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,MAAM,CAAC;IACtE,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,uCAAuC,CAAC;IACjF,6DAA6D;IAC7D,kEAAkE;IAClE,+DAA+D;IAC/D,uEAAuE;IACvE,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,aAAa,CAAC;IAEzE,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC7C,wDAAwD;IACxD,yDAAyD;IACzD,mEAAmE;IACnE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;QAC9B,GAAG;QACH,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,IAAI,CAAC;QACnE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACvD,GAAG,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;QAC1B,GAAG,EAAE,EAAE,wBAAwB,EAAE,GAAG,EAAE;QACtC,QAAQ;QACR,MAAM,EAAE;YACN,qDAAqD;YACrD,2CAA2C;YAC3C,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE;SACvE;QACD,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,kBAAkB;gBAC5B,SAAS,EAAE,yBAAyB;gBACpC,OAAO,EAAE,IAAI;aACd;SACF;QACD,UAAU,EAAE,qBAAqB;YAC/B,CAAC,CAAC;gBACE,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,qCAAqC,EAAE;aAChF;YACH,CAAC,CAAC,EAAE;QACN,kEAAkE;QAClE,uDAAuD;QACvD,qEAAqE;QACrE,qEAAqE;QACrE,mEAAmE;QACnE,iEAAiE;QACjE,SAAS,EAAE,WAAW;QACtB,4DAA4D;QAC5D,gEAAgE;QAChE,oDAAoD;QACpD,MAAM,EAAE,KAAK,EAAE,EAMd,EAAE,EAAE;YACH,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;gBACtB,IAAI,EAAE;oBACJ,IAAI;oBACJ,IAAI;oBACJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAuCD;iBACA;gBACD,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACtF,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,GAAG,SAAS;KACb,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CACX,qBAAqB,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACzE,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IAEhC,gEAAgE;IAChE,6EAA6E;IAC7E,IAAI,SAAS,GAAyC,IAAI,CAAC;IAC3D,IAAI,YAAY,GAQL,IAAI,CAAC;IAEhB,8CAA8C;IAC9C,iEAAiE;IACjE,gEAAgE;IAChE,+DAA+D;IAC/D,gEAAgE;IAChE,mEAAmE;IACnE,iEAAiE;IACjE,kEAAkE;IAClE,yCAAyC;IACzC,8DAA8D;IAC9D,yDAAyD;IACzD,IAAI,cAAc,GAAyB,IAAI,CAAC;IAChD,MAAM,OAAO,GAAG,GAAkB,EAAE;QAClC,IAAI,cAAc;YAAE,OAAO,cAAc,CAAC;QAC1C,cAAc,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,2DAA2D;YAC3D,8BAA8B;YAC9B,MAAM,KAAK,GAAG,YAAY,CAAC;YAC3B,YAAY,GAAG,IAAI,CAAC;YACpB,IAAI,KAAK;gBAAE,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAEzD,MAAM,GAAG,GAAG,SAAS,CAAC;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,GAAG;gBAAE,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAEjD,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1C,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC;IAEF,kEAAkE;IAClE,0DAA0D;IAC1D,sEAAsE;IACtE,6DAA6D;IAC7D,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,QAAQ,GAAG,CAAC,GAAmB,EAAQ,EAAE;QAC7C,WAAW,IAAI,CAAC,CAAC;QACjB,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,uBAAuB,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,gBAAgB,CAAC,CAAC;QAC7D,OAAO,EAAE;aACN,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;aACtB,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhC,IAAI,CAAC;QACH,0DAA0D;QAC1D,wDAAwD;QACxD,6DAA6D;QAC7D,sCAAsC;QACtC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE;;;;;;;;;;OAUlB,CAAC;YACF,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,8BAA8B,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACnG,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,8DAA8D;QAC9D,oEAAoE;QACpE,+DAA+D;QAC/D,uDAAuD;QACvD,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC7B,IAAI,EAAE;gBACJ,MAAM;gBACN,IAAI;gBACJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAyCuB,WAAW;;;;sCAIJ,QAAQ;;gDAEE,QAAQ;;;;;;;;;;;oDAWJ,QAAQ;;;;;oCAKxB,QAAQ;;;;;;OAMrC;aACA;YACD,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CACX,4BAA4B,EAC5B,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAC1B,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAC3B,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QAED,4DAA4D;QAC5D,qDAAqD;QACrD,SAAS,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CACX,yCAAyC,QAAQ,aAAa,QAAQ,EAAE,CACzE,CAAC;QAEF,gEAAgE;QAChE,yCAAyC;QACzC,IAAI,UAAU,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CACX,yDAAyD,WAAW,EAAE,CACvE,CAAC;YACF,6DAA6D;YAC7D,8DAA8D;YAC9D,sCAAsC;YACtC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YACjB,mEAAmE;YACnE,wEAAwE;YACxE,uDAAuD;YACvD,MAAM,MAAM,GAAG,UAAU,kBAAkB,CAAC,WAAW,CAAC,cAAc,QAAQ,EAAE,CAAC;YACjF,OAAO,CAAC,KAAK,CACX,8DAA8D,QAAQ,uBAAuB,CAC9F,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,wCAAwC,MAAM,IAAI,CAAC,CAAC;YAClE,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;gBAC1B,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CACX,mDAAmD,QAAQ,eAAe,WAAW,IAAI,CAC1F,CAAC;QACJ,CAAC;QAED,+DAA+D;QAC/D,0DAA0D;QAC1D,yDAAyD;QACzD,+DAA+D;QAC/D,yDAAyD;QACzD,sBAAsB;QACtB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC3E,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC3E,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACxE,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC3E,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAElB,YAAY,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC;YAC5B,IAAI,EAAE;gBACJ,IAAI;gBACJ,IAAI;gBACJ,8DAA8D;gBAC9D,4DAA4D;gBAC5D,0BAA0B;gBAC1B,4DAA4D,WAAW,CAAC,QAAQ,CAAC,+EAA+E;aACjK;YACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE;SACnD,CAAC,CAAC;QAEH,6DAA6D;QAC7D,uDAAuD;QACvD,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAClD,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3E,YAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAEvB,qDAAqD;QACrD,MAAM,WAAW,GAAG,KAAK,EACvB,MAA2C,EAC3C,GAAuB,EACR,EAAE;YACjB,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,iDAAiD;YACjD,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC/C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBACzC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC;QACF,kEAAkE;QAClE,kCAAkC;QAClC,MAAM,QAAQ,GAAG,YAIhB,CAAC;QACF,KAAK,WAAW,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,KAAK,WAAW,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACnE,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CACX,4CAA4C,MAAM,CAAC,QAAQ,EAAE,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACzB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/scripts/runVmScript.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=runVmScript.d.ts.map

package/dist/scripts/runVmScript.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runVmScript.d.ts","sourceRoot":"","sources":["../../src/scripts/runVmScript.ts"],"names":[],"mappings":""}