@fnndsc/stratus 0.1.0 → 0.2.1

package/README.md

@@ -12,16 +12,21 @@ The `stratus` command hosts the session as a calypso daemon on the bastion, the
 stratus                          # the DEFAULT profile of ~/.oci/config, its home region
 stratus --profile BCH --region us-phoenix-1
 stratus --fake                   # a session over the fake cloud, for tests
+stratus --fake --host-control tasks
+                                 # one that may build domains over the fake cloud
 ```
 
+A domain is made, priced and built with `domain new`, `domain plan` and `domain build`. The build runs as a task (`/proc/steps/<name>-build`) that outlives every surface and a daemon restart; `wait` follows it, `kill` asks it to stop. Starting it needs the `tasks` tier, and before the first step that bills it asks, with the cost. Over the fake cloud the build moves on a clock (`STRATUS_FAKE_TICK_MS`, 700 by default). `domain adopt <name> --from <harbor-oci checkout>` keeps a domain built elsewhere and, with the tier, takes its stack and Terraform state into OCI Resource Manager, where `domain plan` plans against it; an adopted domain is never built on. `domain verify` runs `harbor-oci`'s ten checks against a domain's cluster through its kubeconfig (`src/cluster/`, `src/domain/verify.ts`); the block-volume probe, which writes, needs the tier. `spend` prices each domain's machines, volumes and load balancers at list price (`src/domain/spend.ts`). Over OCI, `domain build` runs through Resource Manager and Red Hat's Assisted Installer (`src/installer/assisted.ts`, a service account from `--redhat-account`, the nodes' key from `--ssh-key`), and `domain teardown` removes what a domain built, asking for its name.
+
 Attach with `chell --remote`, or open the ARGUS address the daemon prints. A credential that does not work still starts the daemon, disconnected, with `/net/oci` empty.
 
 ## Shape
 
 - `src/cloud/driver.ts` is the `CloudDriver` interface: identity, containers, regions, zones, limits, shapes, prices, each answered for the region given.
-- `src/cloud/oci/` is the OCI driver over Oracle's TypeScript SDK (`api.ts` wraps the few calls made, `prices.ts` reads Oracle's public price list). Only this folder may import an `oci-*` package: `npm run lint:stratus-deps` at the repository root keeps it so.
+- `src/cloud/oci/` is the OCI driver over Oracle's TypeScript SDK (`api.ts` wraps the few calls made, `prices.ts` reads Oracle's public price list), and its build half over Resource Manager (`builder.ts`, `rmApi.ts`; `planRead.ts` reads a plan's JSON, drift apart). Only this folder may import an `oci-*` package: `npm run lint:stratus-deps` at the repository root keeps it so.
 - `src/cloud/fake/` is an in-memory cloud. It runs the same driver contract (`tests/support/driverContract.ts`) the OCI driver runs over recorded answers, and it is what the boot proof hosts.
 - `src/vfs/tenancy.ts` is the tree, a fond provider over the driver; `src/vfs/look.ts` is how its rows show.
+- `src/domain/` is a domain built here: its spec (`spec.ts`, `harbor-oci`'s `spec.yaml` shape), its state on the host (`state.ts`, `$XDG_STATE_HOME/stratus/domains/<name>/`), its fit and cost (`sizing.ts`), and its steps (`steps.ts`), written once over the cloud's build half (`src/cloud/builder.ts`) and the installer (`src/installer/`). `src/cloud/fake/builder.ts` is the fake of both.
 - `src/session.ts` is who the session is (`user@tenancy`), where it starts (`domains/`) and where it left off; `src/backend.ts` is the descriptor `engine_create` takes.
 
 ## Proving it

package/dist/args.d.ts

@@ -1,17 +1,31 @@
-/**
- * @file The `stratus` command line: what it takes, and the refusal of
- * anything else by name.
- *
- * @module
- */
 /** What the command line asked for. */
 export interface StratusArgs {
     readonly profile?: string;
     readonly configFile?: string;
     readonly region?: string;
+    /** The Red Hat service account file: `RH_CLIENT_ID=`, `RH_CLIENT_SECRET=`. */
+    readonly redhatAccount?: string;
+    /** The nodes' SSH public key file. */
+    readonly sshKey?: string;
     readonly fake: boolean;
     readonly help: boolean;
+    /** `--domain <name>=<checkout>`, as many as given. */
+    readonly domains: ReadonlyArray<{
+        readonly name: string;
+        readonly root: string;
+    }>;
 }
+/**
+ * Reads `<name>=<checkout>`: a name that is a path segment, and a checkout,
+ * `~` meaning the home directory.
+ *
+ * @param given - The word.
+ * @returns The domain, or null when the word is not one.
+ */
+export declare function domainArg_parse(given: string): {
+    name: string;
+    root: string;
+} | null;
 /**
  * Parses the command line; unknown words are refused by name, as the house
  * rule says.

package/dist/args.js

@@ -4,6 +4,8 @@
  *
  * @module
  */
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
 /** The value after a `--flag VALUE` or `--flag=VALUE`, or undefined. */
 function flagValue_get(argv, flag) {
     const at = argv.indexOf(flag);
@@ -12,6 +14,24 @@ function flagValue_get(argv, flag) {
     const joined = argv.find((arg) => arg.startsWith(`${flag}=`));
     return joined?.slice(flag.length + 1);
 }
+/**
+ * Reads `<name>=<checkout>`: a name that is a path segment, and a checkout,
+ * `~` meaning the home directory.
+ *
+ * @param given - The word.
+ * @returns The domain, or null when the word is not one.
+ */
+export function domainArg_parse(given) {
+    const equals = given.indexOf('=');
+    if (equals <= 0 || equals === given.length - 1)
+        return null;
+    const name = given.slice(0, equals);
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(name))
+        return null;
+    const path = given.slice(equals + 1);
+    const root = path === '~' ? homedir() : path.startsWith('~/') ? join(homedir(), path.slice(2)) : resolve(path);
+    return { name, root };
+}
 /**
  * Parses the command line; unknown words are refused by name, as the house
  * rule says.
@@ -20,23 +40,46 @@ function flagValue_get(argv, flag) {
  * @returns The arguments, or the refusal.
  */
 export function stratusArgs_parse(argv) {
-    const known = ['--profile', '--config', '--region', '--fake', '--help', '-h', '--host-control', '--expose-host-control'];
-    const valued = ['--profile', '--config', '--region', '--host-control'];
+    const known = ['--profile', '--config', '--region', '--fake', '--help', '-h', '--host-control', '--expose-host-control', '--domain', '--redhat-account', '--ssh-key'];
+    const valued = ['--profile', '--config', '--region', '--host-control', '--redhat-account', '--ssh-key'];
+    const domains = [];
     for (let i = 0; i < argv.length; i++) {
         const word = argv[i];
+        if (word === '--domain') {
+            const given = argv[i + 1];
+            const domain = given === undefined ? null : domainArg_parse(given);
+            if (domain === null)
+                return { error: `--domain takes <name>=<harbor-oci checkout>, not '${given ?? ''}'` };
+            domains.push(domain);
+            i++;
+            continue;
+        }
         const name = word.includes('=') ? word.slice(0, word.indexOf('=')) : word;
         if (!known.includes(name))
             return { error: `unknown option '${word}' (stratus --help)` };
+        if (name === '--domain') {
+            const domain = domainArg_parse(word.slice('--domain='.length));
+            if (domain === null)
+                return { error: `--domain takes <name>=<harbor-oci checkout>, not '${word.slice('--domain='.length)}'` };
+            domains.push(domain);
+            continue;
+        }
         if (valued.includes(name) && !word.includes('=') && name !== '--host-control')
             i++;
+        // `--host-control tasks` takes its tiers as the next word, as calypso reads it; bare, it takes none.
+        if (name === '--host-control' && !word.includes('=') && argv[i + 1] !== undefined && !argv[i + 1].startsWith('-'))
+            i++;
     }
     return {
         args: {
             profile: flagValue_get(argv, '--profile'),
             configFile: flagValue_get(argv, '--config'),
             region: flagValue_get(argv, '--region'),
+            redhatAccount: flagValue_get(argv, '--redhat-account'),
+            sshKey: flagValue_get(argv, '--ssh-key'),
             fake: argv.includes('--fake'),
             help: argv.includes('--help') || argv.includes('-h'),
+            domains,
         },
     };
 }

package/dist/args.js.map

@@ -1 +1 @@
-{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,wEAAwE;AACxE,SAAS,aAAa,CAAC,IAA2B,EAAE,IAAY;IAC9D,MAAM,EAAE,GAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAuB,IAAI,CAAC,IAAI,CAAC,CAAC,GAAW,EAAW,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IACnG,OAAO,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA2B;IAC3D,MAAM,KAAK,GAA0B,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IAChJ,MAAM,MAAM,GAA0B,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAC9F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAW,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAW,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,IAAI,oBAAoB,EAAE,CAAC;QACzF,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,gBAAgB;YAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC;YACzC,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC;YAC3C,MAAM,EAAE,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC;YACvC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;SACrD;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiB1C,wEAAwE;AACxE,SAAS,aAAa,CAAC,IAA2B,EAAE,IAAY;IAC9D,MAAM,EAAE,GAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAuB,IAAI,CAAC,IAAI,CAAC,CAAC,GAAW,EAAW,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IACnG,OAAO,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,MAAM,GAAW,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,IAAI,GAAW,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,IAAI,GAAW,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAW,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA2B;IAC3D,MAAM,KAAK,GAA0B,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;IAC7L,MAAM,MAAM,GAA0B,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;IAC/H,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAW,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,KAAK,GAAuB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9C,MAAM,MAAM,GAA0C,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC1G,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,KAAK,EAAE,qDAAqD,KAAK,IAAI,EAAE,GAAG,EAAE,CAAC;YAC3G,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAW,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,IAAI,oBAAoB,EAAE,CAAC;QACzF,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,MAAM,GAA0C,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACtG,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,KAAK,EAAE,qDAAqD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAC9H,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,gBAAgB;YAAE,CAAC,EAAE,CAAC;QACnF,qGAAqG;QACrG,IAAI,IAAI,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,CAAC,EAAE,CAAC;IACzH,CAAC;IACD,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC;YACzC,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC;YAC3C,MAAM,EAAE,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC;YACvC,aAAa,EAAE,aAAa,CAAC,IAAI,EAAE,kBAAkB,CAAC;YACtD,MAAM,EAAE,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACpD,OAAO;SACR;KACF,CAAC;AACJ,CAAC"}

package/dist/backend.d.ts

@@ -4,16 +4,23 @@
  * One backend for every cloud (docs/stratus.adoc, D1): its id is `stratus`,
  * its filesystem is the tenancy tree over whichever driver it was given, its
  * identity the cloud user at the tenancy. It registers no commands yet and
- * no answer kinds (every row is a folder or a file, D5); the prompt is the
- * wire's ChRIS-shaped context filled with what a substrate session has,
- * until the segments of D9 land.
+ * no answer kinds (every row is a folder or a file, D5). Its prompt is the
+ * wire's ChRIS-shaped context filled with what a substrate session has, plus
+ * the backend-neutral segments of D9 (`prompt.ts`) a surface draws in order.
  *
  * @module
  */
-import type { Backend } from '@fnndsc/brasa/core';
+import { type Backend } from '@fnndsc/brasa/core';
 import type { CloudDriver } from './cloud/driver.js';
 import { StratusSession } from './session.js';
 import { TenancyProvider } from './vfs/tenancy.js';
+import { DomainTree } from './vfs/domains.js';
+import type { DomainSource } from './domains/harborOci.js';
+import type { CloudBuilder } from './cloud/builder.js';
+import type { Installer } from './installer/installer.js';
+import type { VerifyReach } from './commands/verify.js';
+import { DomainStore } from './domain/state.js';
+import { type BuildDeps } from './domain/steps.js';
 /** How the backend is made. */
 export interface StratusBackendOptions {
     /** The cloud. */
@@ -24,13 +31,37 @@ export interface StratusBackendOptions {
     readonly configDir?: string;
     /** How long the tree keeps a cloud answer, in milliseconds. */
     readonly cacheLifeMs?: number;
+    /** The Trusted Domains this daemon knows, each a `harbor-oci` checkout. */
+    readonly domains?: ReadonlyArray<DomainSource>;
+    /** Where the domains this daemon builds are kept; `$XDG_STATE_HOME/stratus/domains` when absent. */
+    readonly store?: DomainStore;
+    /** The cloud's build half; absent, this cloud cannot build, adopt or plan, and the verbs say so. With no installer beside it, it adopts and plans but does not build. */
+    readonly builder?: CloudBuilder;
+    /** The installer the build's steps call. */
+    readonly installer?: Installer;
+    /** The DNS zone a new domain's names live under when `domain new` is not told. */
+    readonly baseDomain?: string;
+    /** How `domain verify` reaches a cluster; the network when absent. */
+    readonly verifyReach?: VerifyReach;
+    /** The build's waits, `harbor-oci`'s when absent. */
+    readonly waits?: Pick<BuildDeps, 'pollMs' | 'hostsWaitMs' | 'installWaitMs'>;
 }
 /** The backend and the pieces a host may reach into. */
 export interface StratusBackend {
     readonly backend: Backend;
     readonly session: StratusSession;
     readonly tenancy: TenancyProvider;
+    readonly domains: DomainTree;
+    readonly store: DomainStore;
 }
+/**
+ * The paths a session enters without a lookup: the mount, and once the
+ * tenancy is known, the tenancy, `regions`, `domains` and its kind folders.
+ *
+ * @param session - The session.
+ * @returns The structural paths.
+ */
+export declare function structuralPaths_of(session: StratusSession): string[];
 /**
  * Makes the stratus backend over a driver.
  *

package/dist/backend.js

@@ -1,8 +1,41 @@
+/**
+ * @file The stratus backend: the descriptor a session over a cloud runs with.
+ *
+ * One backend for every cloud (docs/stratus.adoc, D1): its id is `stratus`,
+ * its filesystem is the tenancy tree over whichever driver it was given, its
+ * identity the cloud user at the tenancy. It registers no commands yet and
+ * no answer kinds (every row is a folder or a file, D5). Its prompt is the
+ * wire's ChRIS-shaped context filled with what a substrate session has, plus
+ * the backend-neutral segments of D9 (`prompt.ts`) a surface draws in order.
+ *
+ * @module
+ */
+import { commands_register } from '@fnndsc/brasa/core';
 import { VFSDispatcher } from '@fnndsc/fond';
 import { AnswerCache } from './cache.js';
 import { StratusSession } from './session.js';
 import { TenancyProvider } from './vfs/tenancy.js';
+import { KIND_FOLDERS } from './vfs/resources.js';
+import { DomainTree } from './vfs/domains.js';
+import { stratusCommands_make } from './commands/domain.js';
 import { stratusListingLook } from './vfs/look.js';
+import { stratusSegments_build } from './prompt.js';
+import { DomainStore, domainsRoot_of } from './domain/state.js';
+import { BUILD_WAITS, buildRun_make, STEPS_SOURCE } from './domain/steps.js';
+/**
+ * The paths a session enters without a lookup: the mount, and once the
+ * tenancy is known, the tenancy, `regions`, `domains` and its kind folders.
+ *
+ * @param session - The session.
+ * @returns The structural paths.
+ */
+export function structuralPaths_of(session) {
+    const paths = ['/', '/net', session.mount];
+    if (session.identity === null)
+        return paths;
+    const tenancy = session.tenancyPath;
+    return [...paths, tenancy, `${tenancy}/regions`, `${tenancy}/domains`, ...KIND_FOLDERS.map((kind) => `${tenancy}/${kind}`)];
+}
 /**
  * Makes the stratus backend over a driver.
  *
@@ -11,7 +44,23 @@ import { stratusListingLook } from './vfs/look.js';
  */
 export function stratusBackend_make(options) {
     const session = new StratusSession({ driver: options.driver, region: options.region, configDir: options.configDir });
-    const tenancy = new TenancyProvider({ driver: options.driver, cache: new AnswerCache(options.cacheLifeMs) });
+    const store = options.store ?? new DomainStore(domainsRoot_of());
+    // The steps run over the cloud's build half and the installer; a cloud with neither cannot build yet.
+    const deps = options.builder !== undefined && options.installer !== undefined
+        ? { store, builder: options.builder, installer: options.installer, zones: 3, version: '4.22', ...(options.waits ?? BUILD_WAITS) }
+        : null;
+    const domains = new DomainTree({
+        store,
+        sources: options.domains ?? [],
+        owner: () => session.identity?.user ?? 'disconnected',
+        now: () => new Date(),
+    });
+    const tenancy = new TenancyProvider({ driver: options.driver, cache: new AnswerCache(options.cacheLifeMs), region: () => session.region, domains });
+    const region = () => session.region;
+    commands_register(stratusCommands_make({
+        domains, driver: options.driver, region, domainsPath: () => `${session.tenancyPath}/domains`,
+        build: { domains, store, driver: options.driver, region, deps, builder: options.builder ?? null, baseDomain: options.baseDomain ?? null, ...(options.verifyReach !== undefined ? { verifyReach: options.verifyReach } : {}) },
+    }), 'backend');
     const dispatcher = new VFSDispatcher();
     dispatcher.provider_register(tenancy);
     const backend = {
@@ -19,20 +68,36 @@ export function stratusBackend_make(options) {
         session,
         vfs: {
             dispatcher,
-            structural: ['/', '/net', session.mount],
+            // The tenancy and its fixed folders are entered without asking once
+            // the session knows its tenancy (docs/stratus.adoc, D4).
+            get structural() {
+                return structuralPaths_of(session);
+            },
         },
         completion: { rootWords: ['net'] },
+        // A domain's build runs as a task; one left running when the daemon stopped goes on from its first step not done.
+        jobs: [{
+                id: STEPS_SOURCE,
+                label: 'build steps',
+                resume: (record) => deps === null || typeof record.data['domain'] !== 'string'
+                    ? null
+                    : buildRun_make(record.data['domain'], typeof record.data['through'] === 'string' ? record.data['through'] : undefined, deps),
+            }],
         listingLook: stratusListingLook,
-        prompt: async (last) => ({
-            user: (await session.user_get()) ?? 'disconnected',
-            uri: session.identity?.tenancy ?? '',
-            cwd: session.cwd_get() ?? (await session.home_get()),
-            pacsserver: null,
-            physicalMode: false,
-            lastExitCode: last?.lastExitCode ?? 0,
-            lastCommandDurationMs: last?.lastCommandDurationMs ?? 0,
-        }),
+        prompt: async (last) => {
+            const cwd = session.cwd_get() ?? (await session.home_get());
+            return {
+                user: (await session.user_get()) ?? 'disconnected',
+                uri: session.identity?.tenancy ?? '',
+                cwd,
+                pacsserver: null,
+                physicalMode: false,
+                lastExitCode: last?.lastExitCode ?? 0,
+                lastCommandDurationMs: last?.lastCommandDurationMs ?? 0,
+                segments: stratusSegments_build(session, cwd),
+            };
+        },
     };
-    return { backend, session, tenancy };
+    return { backend, session, tenancy, domains, store };
 }
 //# sourceMappingURL=backend.js.map

package/dist/backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend.js","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAqBnD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA8B;IAChE,MAAM,OAAO,GAAmB,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACrI,MAAM,OAAO,GAAoB,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9H,MAAM,UAAU,GAAkB,IAAI,aAAa,EAAE,CAAC;IACtD,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAY;QACvB,EAAE,EAAE,SAAS;QACb,OAAO;QACP,GAAG,EAAE;YACH,UAAU;YACV,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC;SACzC;QACD,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE;QAClC,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE,KAAK,EAAE,IAAwB,EAA0B,EAAE,CAAC,CAAC;YACnE,IAAI,EAAE,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,cAAc;YAClD,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE;YACpC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YACpD,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,IAAI,EAAE,YAAY,IAAI,CAAC;YACrC,qBAAqB,EAAE,IAAI,EAAE,qBAAqB,IAAI,CAAC;SACxD,CAAC;KACH,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC"}
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,iBAAiB,EAAqE,MAAM,oBAAoB,CAAC;AAC1H,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAIpD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AAqC7F;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACxD,MAAM,KAAK,GAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,OAAO,GAAW,OAAO,CAAC,WAAW,CAAC;IAC5C,OAAO,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,UAAU,EAAE,GAAG,OAAO,UAAU,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAY,EAAU,EAAE,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AAC9I,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA8B;IAChE,MAAM,OAAO,GAAmB,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACrI,MAAM,KAAK,GAAgB,OAAO,CAAC,KAAK,IAAI,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9E,sGAAsG;IACtG,MAAM,IAAI,GAAqB,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAC7F,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,EAAE;QACjI,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,OAAO,GAAe,IAAI,UAAU,CAAC;QACzC,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,KAAK,EAAE,GAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,cAAc;QAC7D,GAAG,EAAE,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE;KAC5B,CAAC,CAAC;IACH,MAAM,OAAO,GAAoB,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,GAAkB,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACpL,MAAM,MAAM,GAAG,GAAkB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACnD,iBAAiB,CAAC,oBAAoB,CAAC;QACrC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAW,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,UAAU;QACpG,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAC9N,CAAC,EAAE,SAAS,CAAC,CAAC;IACf,MAAM,UAAU,GAAkB,IAAI,aAAa,EAAE,CAAC;IACtD,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAY;QACvB,EAAE,EAAE,SAAS;QACb,OAAO;QACP,GAAG,EAAE;YACH,UAAU;YACV,oEAAoE;YACpE,yDAAyD;YACzD,IAAI,UAAU;gBACZ,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;SACF;QACD,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE;QAClC,kHAAkH;QAClH,IAAI,EAAE,CAAC;gBACL,EAAE,EAAE,YAAY;gBAChB,KAAK,EAAE,aAAa;gBACpB,MAAM,EAAE,CAAC,MAAiB,EAAiB,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ;oBACtG,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC;aAChI,CAAC;QACF,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE,KAAK,EAAE,IAAwB,EAA0B,EAAE;YACjE,MAAM,GAAG,GAAW,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACpE,OAAO;gBACL,IAAI,EAAE,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,cAAc;gBAClD,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE;gBACpC,GAAG;gBACH,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,KAAK;gBACnB,YAAY,EAAE,IAAI,EAAE,YAAY,IAAI,CAAC;gBACrC,qBAAqB,EAAE,IAAI,EAAE,qBAAqB,IAAI,CAAC;gBACvD,QAAQ,EAAE,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC;aAC9C,CAAC;QACJ,CAAC;KACF,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC"}

package/dist/cloud/builder.d.ts

@@ -0,0 +1,172 @@
+/**
+ * @file The cloud driver's build half: what a domain's steps ask of a cloud
+ * (docs/stratus.adoc, D3). The read half is `driver.ts`; a cloud that cannot
+ * build yet has a driver and no builder, and the build verbs say so.
+ *
+ * OCI's builder runs Terraform in Resource Manager: a plan is a plan job
+ * read as JSON, an apply is an apply job. Its plan says which changes are
+ * `Oracle-Tags` drift, so a re-plan can be read for real change (D6).
+ *
+ * @module
+ */
+import type { DomainSpec } from '../domain/spec.js';
+import type { PlatformManifest } from '../installer/installer.js';
+/** One check the build makes before it starts. */
+export interface PreflightCheck {
+    name: string;
+    ok: boolean;
+    note: string;
+}
+/** One change a plan would make. */
+export interface PlanRow {
+    action: 'create' | 'change' | 'destroy';
+    /** The neutral kind (`instances`, `loadbalancers`, …) or the cloud's own. */
+    kind: string;
+    name: string;
+    /** A change the cloud makes to its own tags after an apply, not a real one. */
+    drift?: boolean;
+}
+/**
+ * An infrastructure plan, as the operator is asked about it.
+ *
+ * @property ref - The cloud's handle on it, for the apply (OCI: the plan job's id).
+ * @property rows - Each change.
+ */
+export interface InfraPlan {
+    ref: string;
+    rows: ReadonlyArray<PlanRow>;
+    /** The stack the plan was made in, when the plan made one. */
+    stackRef?: string;
+}
+/** A plan's counts: a resource both destroyed and created is replaced, drift is apart from real change. */
+export interface PlanCounts {
+    create: number;
+    replace: number;
+    change: number;
+    drift: number;
+    destroy: number;
+    /** The kinds replaced, for the line. */
+    replacedKinds: string[];
+}
+/**
+ * A plan's counts (D6).
+ *
+ * @param plan - The plan.
+ * @returns Creations, replacements, real changes, drift, destructions.
+ */
+export declare function planCounts_of(plan: InfraPlan): PlanCounts;
+/**
+ * Whether a plan touches anything that exists, drift aside: what an apply refuses unless asked by name.
+ *
+ * @param counts - The plan's counts.
+ * @returns True when it replaces, changes or destroys.
+ */
+export declare function planCounts_alter(counts: PlanCounts): boolean;
+/**
+ * A plan's counts in a line.
+ *
+ * @param counts - The counts.
+ * @returns `3 to create, 21 to replace (loadbalancers), 0 to change and 24 Oracle-Tags drift, 0 to destroy`.
+ */
+export declare function planCounts_words(counts: PlanCounts): string;
+/** What every builder call is given to report with and to stop on. */
+export interface BuildCall {
+    /** Writes a line to the step's log. */
+    readonly log: (line: string) => void;
+    /** Aborted when the operator asks the step to stop. */
+    readonly signal: AbortSignal;
+}
+/** The addresses an apply leaves for the DNS records. */
+export interface InfraOutputs {
+    /** The API's load balancer address. */
+    apiIp: string;
+    /** The internal API's address. */
+    apiIntIp: string;
+    /** The applications' (`*.apps`) address. */
+    appsIp: string;
+    /** The stack's handle, for a later plan and the teardown. */
+    stackRef: string;
+    /** The platform manifests the stack made for the installer (OCI: its cloud controller and CSI driver). */
+    manifests: PlatformManifest[];
+}
+/** What a domain's teardown removes, beside its stack. */
+export interface TeardownRequest {
+    readonly domain: string;
+    readonly region: string;
+    readonly compartmentId: string;
+    readonly baseDomain: string;
+    /** The stack whose resources a destroy job removes, when one was made. */
+    readonly stackRef?: string;
+    /** The discovery image and its link, when the iso step ran. */
+    readonly isoObject?: string;
+    readonly isoLinkId?: string;
+    /** Block volumes the cluster made that the stack never knew (its CSI claims). */
+    readonly volumeIds: ReadonlyArray<string>;
+}
+/** A cloud's build half. */
+export interface CloudBuilder {
+    /** Its id (`oci`, `fake`). */
+    readonly id: string;
+    /** Checks the tenancy can take the domain: keys, limits, the tag namespace, the zone. */
+    preflight(request: {
+        domain: string;
+        spec: DomainSpec;
+        region: string;
+        baseDomain: string;
+        compartmentId: string;
+    }, call: BuildCall): Promise<PreflightCheck[]>;
+    /** Puts the discovery image where the machines boot from: its object, a link to it (a secret) and the link's end. */
+    iso_store(request: {
+        domain: string;
+        url: string;
+        region: string;
+        compartmentId: string;
+    }, call: BuildCall): Promise<{
+        object: string;
+        expires: string;
+        link: string;
+        linkId: string;
+    }>;
+    /** Plans the infrastructure: against the domain's stack when it has one (adopted, or a re-plan), else in a new one. */
+    infra_plan(request: {
+        domain: string;
+        spec: DomainSpec;
+        region: string;
+        isoObject: string;
+        stackRef?: string;
+        compartmentId?: string;
+        baseDomain?: string;
+        isoLink?: string;
+    }, call: BuildCall): Promise<InfraPlan>;
+    /** Applies a plan. Billing starts here. */
+    infra_apply(request: {
+        domain: string;
+        plan: InfraPlan;
+        region: string;
+        stackRef?: string;
+    }, call: BuildCall): Promise<InfraOutputs>;
+    /** Writes the cluster's records in its zone. */
+    dns_upsert(request: {
+        domain: string;
+        baseDomain: string;
+        outputs: InfraOutputs;
+        compartmentId: string;
+        region: string;
+    }, call: BuildCall): Promise<string[]>;
+    /** Takes in infrastructure built elsewhere: a stack with its variables and its Terraform state; returns the stack's handle. */
+    /** How many resources a stack's state holds: what a destroy job removes. */
+    stackResources_count?(request: {
+        region: string;
+        stackRef: string;
+    }): Promise<number>;
+    /** Removes what a domain built: the stack's resources (a destroy job), then its records, image, link and volumes. Returns what went, a line each. */
+    teardown_run?(request: TeardownRequest, call: BuildCall): Promise<string[]>;
+    stack_adopt?(request: {
+        domain: string;
+        region: string;
+        compartmentId: string;
+        variables: Record<string, string>;
+        state: Buffer;
+        stackVersion: string;
+    }, call: BuildCall): Promise<string>;
+}

package/dist/cloud/builder.js

@@ -0,0 +1,41 @@
+/**
+ * A plan's counts (D6).
+ *
+ * @param plan - The plan.
+ * @returns Creations, replacements, real changes, drift, destructions.
+ */
+export function planCounts_of(plan) {
+    const rows = plan.rows;
+    const created = new Set(rows.filter((row) => row.action === 'create').map((row) => row.name));
+    const replaced = rows.filter((row) => row.action === 'destroy' && created.has(row.name));
+    const replacedNames = new Set(replaced.map((row) => row.name));
+    return {
+        create: rows.filter((row) => row.action === 'create' && !replacedNames.has(row.name)).length,
+        replace: replaced.length,
+        change: rows.filter((row) => row.action === 'change' && row.drift !== true).length,
+        drift: rows.filter((row) => row.action === 'change' && row.drift === true).length,
+        destroy: rows.filter((row) => row.action === 'destroy' && !replacedNames.has(row.name)).length,
+        replacedKinds: [...new Set(replaced.map((row) => row.kind))].sort(),
+    };
+}
+/**
+ * Whether a plan touches anything that exists, drift aside: what an apply refuses unless asked by name.
+ *
+ * @param counts - The plan's counts.
+ * @returns True when it replaces, changes or destroys.
+ */
+export function planCounts_alter(counts) {
+    return counts.replace > 0 || counts.change > 0 || counts.destroy > 0;
+}
+/**
+ * A plan's counts in a line.
+ *
+ * @param counts - The counts.
+ * @returns `3 to create, 21 to replace (loadbalancers), 0 to change and 24 Oracle-Tags drift, 0 to destroy`.
+ */
+export function planCounts_words(counts) {
+    const replace = counts.replace > 0 ? `, ${counts.replace} to replace (${counts.replacedKinds.join(', ')})` : '';
+    const drift = counts.drift > 0 ? ` and ${counts.drift} Oracle-Tags drift` : '';
+    return `${counts.create} to create${replace}, ${counts.change} to change${drift}, ${counts.destroy} to destroy`;
+}
+//# sourceMappingURL=builder.js.map

package/dist/cloud/builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/cloud/builder.ts"],"names":[],"mappings":"AAuDA;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAe;IAC3C,MAAM,IAAI,GAA2B,IAAI,CAAC,IAAI,CAAC;IAC/C,MAAM,OAAO,GAAgB,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAY,EAAW,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,GAAY,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9I,MAAM,QAAQ,GAAc,IAAI,CAAC,MAAM,CAAC,CAAC,GAAY,EAAW,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtH,MAAM,aAAa,GAAgB,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAY,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7F,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAY,EAAW,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAC9G,OAAO,EAAE,QAAQ,CAAC,MAAM;QACxB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAY,EAAW,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM;QACpG,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAY,EAAW,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM;QACnG,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAY,EAAW,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAChH,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAY,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;KACrF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,MAAM,OAAO,GAAW,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,OAAO,gBAAgB,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxH,MAAM,KAAK,GAAW,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,KAAK,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,OAAO,GAAG,MAAM,CAAC,MAAM,aAAa,OAAO,KAAK,MAAM,CAAC,MAAM,aAAa,KAAK,KAAK,MAAM,CAAC,OAAO,aAAa,CAAC;AAClH,CAAC"}