@hsuite/smart-engines-cli 1.2.0 → 1.4.0

package/dist/commands/redeploy.js

@@ -0,0 +1,310 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redeployCommand = void 0;
+exports.runRedeploy = runRedeploy;
+/**
+ * `hsuite redeploy` — redeploy an EXISTING smart-app (same appId, fresh push
+ * creds, a new image tag and/or a new frontend bundle).
+ *
+ * Mirrors `deploy` but re-binds to an EXISTING app instead of forking a new one:
+ *   - resolves the target appId (flag → DEPLOYED_APP_ID) and authenticates as
+ *     the subscription identity (SUBSCRIPTION_APP_ID → target). Auth is by XRPL
+ *     wallet; the bound appId is only client context (the host authorizes by
+ *     wallet → developerWallet ownership of the target appId).
+ *   - calls `reissuePushCredentials(appId)` for fresh single-use push creds —
+ *     NOT `init`, which would mint a brand-new app + DKG entity + paid
+ *     subscription on every run (~20 XRP/run + a new appId each time).
+ *   - `--tag` overrides the manifest's `backend.tag`.
+ *
+ * The manifest is the ONE canonical shape (backend required, frontend optional):
+ * redeploy always rebuilds + pushes the backend image and re-uploads the SPA
+ * bundle when a `frontend` block is present, then `deploy()`s.
+ *
+ * Same trusted-deploy attestation as `deploy` (the host's deploy policy is
+ * hardened-by-default).
+ */
+const commander_1 = require("commander");
+const chalk_1 = __importDefault(require("chalk"));
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+const env_1 = require("../_lib/env");
+const subscription_env_1 = require("../_lib/subscription-env");
+const runtime_env_1 = require("../_lib/runtime-env");
+const cluster_1 = require("../_lib/cluster");
+const framework_1 = require("../_lib/framework");
+const baas_1 = require("../_lib/baas");
+const registry_fanout_1 = require("../_lib/registry-fanout");
+const attestation_1 = require("../_lib/attestation");
+const deploy_manifest_1 = require("../_lib/deploy-manifest");
+const frontend_guard_1 = require("../_lib/frontend-guard");
+const status_1 = require("./status");
+/** Pure orchestration body — exported for unit tests. */
+async function runRedeploy(opts) {
+    const manifest = (0, deploy_manifest_1.parseManifest)(opts.manifestPath);
+    const env = (0, env_1.readEnv)(opts.envPath);
+    const b = manifest.backend;
+    const tag = opts.tag ?? b.tag;
+    const detection = (0, framework_1.detectFramework)(opts.projectDir);
+    const sdkVersion = (0, framework_1.resolveSdkVersion)(opts.projectDir, detection);
+    // Auth IDENTITY (subscription) ≠ management TARGET (deployed app). The
+    // deployed app holds no subscription, so authenticate as the developer's
+    // subscription identity; the reissue below operates on the deployed appId.
+    // Auth is by XRPL wallet — the bound appId is only client context; the host
+    // authorizes by wallet → developerWallet ownership of the target appId.
+    // (Under mint-first/deploy-last `SUBSCRIPTION_APP_ID == DEPLOYED_APP_ID`, so
+    // these usually resolve to the same id; the split is retained because a
+    // developer MAY pass a distinct deployed --app-id.)
+    const subscriptionAppId = (0, subscription_env_1.requireSubscriptionAppId)(env, {
+        subscriptionAppId: opts.subscriptionAppId,
+    });
+    // Resolve the EXISTING app to redeploy: explicit flag → DEPLOYED_APP_ID.
+    // No subscription fallback — the subscription is the auth identity above, not
+    // a deploy target; a subscribe-but-never-deployed state has nothing to redeploy.
+    const appId = opts.appId ?? env.get('DEPLOYED_APP_ID');
+    if (!appId) {
+        throw new Error('No app to redeploy. Pass --app-id <id> or run `hsuite deploy` first (sets DEPLOYED_APP_ID).');
+    }
+    const client = await (0, baas_1.connectAndAuth)({
+        gateway: opts.gateway,
+        env,
+        appId: subscriptionAppId,
+        clientFactory: opts.clientFactory,
+    });
+    // Reissue ephemeral push creds for the EXISTING app — no fork, no new entity,
+    // no new subscription. Hits `POST /apps/:appId/credentials/reissue` (the
+    // dedicated redeploy route, distinct from deploy's `credentials/push`): the
+    // host asserts ownership + an ACTIVE subscription, refuses SUSPENDED apps, and
+    // (idempotently) rotates the per-app Harbor push robot.
+    const creds = await client.deployment.reissuePushCredentials(appId);
+    console.log(chalk_1.default.gray(`  push creds reissued: appId=${creds.appId} registry=${creds.registry.repository}`));
+    if (!tag)
+        throw new Error('a backend redeploy needs a tag (manifest.backend.tag or --tag)');
+    // Captures the pushed image's `sha256:<64hex>` manifest digest — the
+    // attestation binds to THIS, not the tag-form ref (the host requires it ===
+    // the digest Harbor serves for the tag).
+    const imageDigest = (0, baas_1.buildAndPush)({
+        registry: creds.registry,
+        tag,
+        context: (0, path_1.resolve)(b.context ?? '.'),
+        dockerfile: b.dockerfile ?? 'Dockerfile',
+        platform: b.platform,
+        build: b.build,
+        skipBuild: opts.skipBuild,
+        skipPush: opts.skipPush,
+        dockerHost: opts.dockerHost,
+        name: manifest.name,
+        runFn: opts.runFn,
+    });
+    console.log(chalk_1.default.gray(`  pushed: ${creds.registry.repository}:${tag} (${imageDigest})`));
+    // Fan the pushed image out to EVERY cluster Harbor before reconciling — the
+    // federated registry host round-robins, so the single push landed on one
+    // cluster. Blocks (throws → exit 1) unless every cluster serves the digest.
+    if (!opts.skipDistribute) {
+        await (0, registry_fanout_1.fanOutPushedImage)({
+            registry: creds.registry,
+            tag,
+            digest: imageDigest,
+            log: (m) => console.log(chalk_1.default.gray(m)),
+        });
+    }
+    // Relative `frontend.dir`/`bundlePath` (and the frontend build hook) resolve
+    // against the smart-app root — `backend.context` when present, else
+    // `--project` — NOT the CLI's process.cwd(). (Same cwd class as the backend
+    // build: a bare `public` must mean `<smart-app>/public`.)
+    const baseDir = (0, path_1.resolve)(b.context ?? opts.projectDir);
+    let bundleSha256 = '';
+    if (manifest.frontend) {
+        const bundlePath = await resolveFrontendBundle(manifest, baseDir, opts.runFn);
+        const bundle = await fs_1.promises.readFile(bundlePath);
+        const upload = await client.deployment.uploadFrontend(appId, bundle);
+        bundleSha256 = upload.bundleSha256;
+        console.log(chalk_1.default.gray(`  frontend: sha256=${bundleSha256.slice(0, 12)}…`));
+    }
+    // Forward the developer's `.env.local` runtime creds into the deployed
+    // customer-env (issue #1564) — same as `deploy`. `manifest.backend.env` wins
+    // for explicit non-secret overrides; secrets ride from `.env.local`. Resolved
+    // BEFORE the attestation-seed check so a credential-less redeploy fails with
+    // the specific #1564 remedy. FAILS LOUD unless `--allow-open-mode` (which then
+    // withholds the seed from the container while still signing locally).
+    const runtimeEnv = (0, runtime_env_1.resolveRuntimeEnv)({
+        env,
+        manifestEnv: b.env,
+        allowOpenMode: opts.allowOpenMode,
+        warn: (m) => console.warn(chalk_1.default.yellow(`  ⚠ ${m}`)),
+    });
+    console.log(chalk_1.default.gray(`  runtime env: ${Object.keys(runtimeEnv).length} vars forwarded from ${opts.envPath} + manifest` +
+        (runtimeEnv.XRPL_SEED ? ' (cluster mode)' : ' (open mode)')));
+    // The host's hardened deploy policy requires a signed attestation, so the seed
+    // is needed to SIGN regardless of open/cluster mode.
+    const seed = env.get('XRPL_SEED');
+    if (!seed)
+        throw new Error('XRPL_SEED required to sign the build attestation');
+    const signed = (0, attestation_1.assembleAndSign)({
+        appId,
+        developerWallet: env.get('XRPL_ADDRESS') ?? '',
+        developerChain: 'xrpl',
+        framework: detection.framework,
+        sdkVersion,
+        // The pushed image's `sha256:<64hex>` registry manifest digest (captured
+        // by buildAndPush) — bound with strict equality by the host, so it MUST
+        // be the digest, not the tag-form ref the gate would reject.
+        imageDigest,
+        bundleSha256,
+        cliVersion: (0, attestation_1.readCliVersion)(),
+    }, seed);
+    const url = await deployBackend(client, appId, manifest, tag, signed, runtimeEnv, opts.strategy);
+    // Block until the runtime settles (default on) — see deploy.ts for rationale.
+    if (opts.wait !== false) {
+        const status = await (0, status_1.waitForRunning)(client, appId, {
+            intervalMs: opts.waitIntervalMs,
+            maxPolls: opts.waitMaxPolls,
+            sleep: opts.sleep,
+        });
+        console.log(chalk_1.default.gray(`  runtime: ${status.runtime?.runtimeState ?? status.state}`));
+        if (status.runtime?.runtimeState === 'FAILED') {
+            throw new Error(`redeploy reached FAILED runtime for ${appId}` +
+                (status.runtime?.lastError ? `: ${status.runtime.lastError}` : ''));
+        }
+    }
+    return { appId, url };
+}
+/**
+ * Resolve the frontend bundle to a tarball path: `bundlePath` wins; otherwise
+ * tar `dir` (running its optional `build` first) into a temp `.tar`.
+ *
+ * `baseDir` is the smart-app root (`backend.context` / `--project`); relative
+ * `dir`/`bundlePath` resolve against it, NOT the CLI's process.cwd(), and the
+ * optional pre-build hook runs with `cwd` set to the resolved `dir`.
+ */
+async function resolveFrontendBundle(manifest, baseDir, runFn) {
+    const f = manifest.frontend;
+    if (f.bundlePath) {
+        const p = (0, path_1.resolve)(baseDir, f.bundlePath);
+        if (!(0, fs_1.existsSync)(p))
+            throw new Error(`frontend bundle not found: ${p}`);
+        return p;
+    }
+    const dir = (0, path_1.resolve)(baseDir, f.dir);
+    if (!(0, fs_1.existsSync)(dir))
+        throw new Error(`frontend dir not found: ${dir}`);
+    // Optional pre-build (e.g. `ng build`) — run via the injected seam IN `dir`
+    // (a real chdir; `PWD` alone does not move the child's working directory).
+    if (f.build) {
+        const run = runFn ?? (await Promise.resolve().then(() => __importStar(require('child_process')))).execFileSync;
+        run('sh', ['-c', f.build], {
+            stdio: 'inherit',
+            cwd: dir,
+            env: { ...process.env, PWD: dir },
+        });
+    }
+    // Fail-closed: never re-ship a bundle that still carries unfilled
+    // REPLACE_BEFORE_DEPLOY placeholders (shared with `deploy`). See frontend-guard.
+    await (0, frontend_guard_1.assertNoDeploySentinels)(dir);
+    const out = (0, path_1.join)((0, os_1.tmpdir)(), `hsuite-frontend-${Date.now()}.tar`);
+    return (0, baas_1.tarFrontend)({ dir, out, runFn });
+}
+async function deployBackend(client, appId, manifest, tag, attestation, runtimeEnv, strategy) {
+    const b = manifest.backend;
+    const body = {
+        tag,
+        port: b.port,
+        replicas: b.replicas ?? 1,
+        degree: manifest.degree,
+        // Resolved runtime env — `.env.local` runtime creds merged with
+        // `manifest.backend.env` (manifest wins) — NOT `manifest.backend.env` alone
+        // (issue #1564). Mirrored into the PQC-encrypted customer-env Secret.
+        env: runtimeEnv,
+        resources: b.limits,
+        ...(strategy ? { strategy } : {}),
+        attestation,
+    };
+    const res = await client.deployment.deploy(appId, body);
+    return res.url;
+}
+exports.redeployCommand = new commander_1.Command('redeploy')
+    .description('Redeploy an existing smart-app (same appId, new tag and/or frontend bundle)')
+    .requiredOption('--manifest <file>', 'JSON manifest path')
+    .option('--env <file>', 'Env file with auth creds', '.env.local')
+    .option('--project <dir>', 'Smart-app project root (for SDK/framework detection)', '.')
+    .option('--gateway <url>', 'Smart-engines gateway URL', cluster_1.DEFAULT_GATEWAY)
+    .option('--app-id <id>', 'Existing deployed appId to redeploy (else DEPLOYED_APP_ID)')
+    .option('--subscription-app-id <id>', 'Subscription appId to authenticate as (else SUBSCRIPTION_APP_ID)')
+    .option('--tag <tag>', 'Override the backend image tag (else manifest.backend.tag)')
+    .option('--strategy <strategy>', 'Update strategy: rolling | recreate')
+    .option('--docker-host <host>', 'DOCKER_HOST for the build/push (defaults to $DOCKER_HOST)')
+    .option('--skip-build', 'Skip `docker build`', false)
+    .option('--skip-push', 'Skip `docker push`', false)
+    .option('--skip-distribute', 'Skip the multi-cluster image fan-out (single-cluster / dev registry)', false)
+    .option('--allow-open-mode', 'Allow an intentional zero-cred / open-mode redeploy (no XRPL_SEED forwarded). Default: a credential-less redeploy FAILS LOUD (#1564).', false)
+    .option('--no-wait', 'Do not block until the runtime settles — exit as soon as deploy() is accepted (default: wait for RUNNING/FAILED)')
+    .action(async (opts) => {
+    console.log(chalk_1.default.bold.cyan('\n  hsuite redeploy\n'));
+    let result;
+    try {
+        result = await runRedeploy({
+            manifestPath: opts.manifest,
+            envPath: opts.env,
+            gateway: opts.gateway,
+            projectDir: opts.project,
+            appId: opts.appId,
+            subscriptionAppId: opts.subscriptionAppId,
+            tag: opts.tag,
+            strategy: opts.strategy,
+            dockerHost: opts.dockerHost ?? process.env.DOCKER_HOST,
+            skipBuild: opts.skipBuild,
+            skipPush: opts.skipPush,
+            skipDistribute: opts.skipDistribute,
+            allowOpenMode: opts.allowOpenMode,
+            wait: opts.wait,
+        });
+    }
+    catch (err) {
+        if (err instanceof framework_1.NoSdkError) {
+            console.error(chalk_1.default.red(`\n  ✗ ${err.message}\n`));
+        }
+        else {
+            console.error(chalk_1.default.red(`\n  ✗ ${err.message}\n`));
+        }
+        process.exit(1);
+    }
+    (0, env_1.upsertEnv)(opts.env, { DEPLOYED_APP_ID: result.appId });
+    console.log(chalk_1.default.bold.green(`\n  ✓ redeployed: ${result.url}\n`));
+});
+//# sourceMappingURL=redeploy.js.map

package/dist/commands/redeploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redeploy.js","sourceRoot":"","sources":["../../src/commands/redeploy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgFA,kCAwJC;AAxOD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,yCAAoC;AACpC,kDAA0B;AAC1B,2BAAgD;AAChD,+BAAqC;AACrC,2BAA4B;AAI5B,qCAAiD;AACjD,+DAAoE;AACpE,qDAAwD;AACxD,6CAAkD;AAClD,iDAAmF;AACnF,uCAAqF;AACrF,6DAA4D;AAC5D,qDAA8F;AAC9F,6DAAuE;AACvE,2DAAiE;AACjE,qCAA0C;AAwC1C,yDAAyD;AAClD,KAAK,UAAU,WAAW,CAAC,IAAkB;IAClD,MAAM,QAAQ,GAAG,IAAA,+BAAa,EAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAA,aAAO,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElC,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC;IAE9B,MAAM,SAAS,GAAG,IAAA,2BAAe,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAA,6BAAiB,EAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAEjE,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,wEAAwE;IACxE,oDAAoD;IACpD,MAAM,iBAAiB,GAAG,IAAA,2CAAwB,EAAC,GAAG,EAAE;QACtD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC,CAAC;IAEH,yEAAyE;IACzE,8EAA8E;IAC9E,iFAAiF;IACjF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAc,EAAC;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG;QACH,KAAK,EAAE,iBAAiB;QACxB,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,yEAAyE;IACzE,4EAA4E;IAC5E,+EAA+E;IAC/E,wDAAwD;IACxD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,IAAI,CAAC,gCAAgC,KAAK,CAAC,KAAK,aAAa,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAChG,CAAC;IAEF,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC5F,qEAAqE;IACrE,4EAA4E;IAC5E,yCAAyC;IACzC,MAAM,WAAW,GAAG,IAAA,mBAAY,EAAC;QAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG;QACH,OAAO,EAAE,IAAA,cAAO,EAAC,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC;QAClC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,YAAY;QACxC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC;IAE1F,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,IAAA,mCAAiB,EAAC;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG;YACH,MAAM,EAAE,WAAW;YACnB,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,oEAAoE;IACpE,4EAA4E;IAC5E,0DAA0D;IAC1D,MAAM,OAAO,GAAG,IAAA,cAAO,EAAC,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,aAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrE,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,sBAAsB,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,uEAAuE;IACvE,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,+EAA+E;IAC/E,sEAAsE;IACtE,MAAM,UAAU,GAAG,IAAA,+BAAiB,EAAC;QACnC,GAAG;QACH,WAAW,EAAE,CAAC,CAAC,GAAG;QAClB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;KACpD,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,IAAI,CACR,kBAAkB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,wBAAwB,IAAI,CAAC,OAAO,aAAa;QAC/F,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,CAAC,CAC9D,CACF,CAAC;IAEF,+EAA+E;IAC/E,qDAAqD;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAA,6BAAe,EAC5B;QACE,KAAK;QACL,eAAe,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE;QAC9C,cAAc,EAAE,MAAM;QACtB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,UAAU;QACV,yEAAyE;QACzE,wEAAwE;QACxE,6DAA6D;QAC7D,WAAW;QACX,YAAY;QACZ,UAAU,EAAE,IAAA,4BAAc,GAAE;KAC7B,EACD,IAAI,CACL,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEjG,8EAA8E;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAc,EAAC,MAAM,EAAE,KAAK,EAAE;YACjD,UAAU,EAAE,IAAI,CAAC,cAAc;YAC/B,QAAQ,EAAE,IAAI,CAAC,YAAY;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,EAAE,YAAY,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,OAAO,EAAE,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,uCAAuC,KAAK,EAAE;gBAC5C,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,qBAAqB,CAClC,QAAkB,EAClB,OAAe,EACf,KAAa;IAEb,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAS,CAAC;IAC7B,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,IAAA,cAAO,EAAC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,IAAA,eAAU,EAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,cAAO,EAAC,OAAO,EAAE,CAAC,CAAC,GAAI,CAAC,CAAC;IACrC,IAAI,CAAC,IAAA,eAAU,EAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;IACxE,4EAA4E;IAC5E,2EAA2E;IAC3E,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,KAAK,IAAK,CAAC,wDAAa,eAAe,GAAC,CAAC,CAAC,YAAiC,CAAC;QACxF,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE;YACzB,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAuB;SACvD,CAAC,CAAC;IACL,CAAC;IACD,kEAAkE;IAClE,iFAAiF;IACjF,MAAM,IAAA,wCAAuB,EAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChE,OAAO,IAAA,kBAAW,EAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAAkB,EAClB,KAAa,EACb,QAAkB,EAClB,GAAW,EACX,WAA8B,EAC9B,UAAkC,EAClC,QAAiC;IAEjC,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC3B,MAAM,IAAI,GAA2D;QACnE,GAAG;QACH,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC;QACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,gEAAgE;QAChE,4EAA4E;QAC5E,sEAAsE;QACtE,GAAG,EAAE,UAAU;QACf,SAAS,EAAE,CAAC,CAAC,MAAM;QACnB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,WAAW;KACZ,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACxD,OAAO,GAAG,CAAC,GAAG,CAAC;AACjB,CAAC;AAEY,QAAA,eAAe,GAAG,IAAI,mBAAO,CAAC,UAAU,CAAC;KACnD,WAAW,CAAC,6EAA6E,CAAC;KAC1F,cAAc,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;KACzD,MAAM,CAAC,cAAc,EAAE,0BAA0B,EAAE,YAAY,CAAC;KAChE,MAAM,CAAC,iBAAiB,EAAE,sDAAsD,EAAE,GAAG,CAAC;KACtF,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,EAAE,yBAAe,CAAC;KACvE,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;KACrF,MAAM,CACL,4BAA4B,EAC5B,kEAAkE,CACnE;KACA,MAAM,CAAC,aAAa,EAAE,4DAA4D,CAAC;KACnF,MAAM,CAAC,uBAAuB,EAAE,qCAAqC,CAAC;KACtE,MAAM,CAAC,sBAAsB,EAAE,2DAA2D,CAAC;KAC3F,MAAM,CAAC,cAAc,EAAE,qBAAqB,EAAE,KAAK,CAAC;KACpD,MAAM,CAAC,aAAa,EAAE,oBAAoB,EAAE,KAAK,CAAC;KAClD,MAAM,CAAC,mBAAmB,EAAE,sEAAsE,EAAE,KAAK,CAAC;KAC1G,MAAM,CAAC,mBAAmB,EAAE,uIAAuI,EAAE,KAAK,CAAC;KAC3K,MAAM,CAAC,WAAW,EAAE,kHAAkH,CAAC;KACvI,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACtD,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,WAAW,CAAC;YACzB,YAAY,EAAE,IAAI,CAAC,QAAQ;YAC3B,OAAO,EAAE,IAAI,CAAC,GAAG;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;YACtD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,sBAAU,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,SAAU,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAA,eAAS,EAAC,IAAI,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC"}

package/dist/commands/status.d.ts

@@ -0,0 +1,51 @@
+/**
+ * `hsuite status` — live lifecycle + runtime status of a deployed app.
+ *
+ * Renders `state` (PENDING_SUBSCRIPTION | ACTIVE | SUSPENDED | RETIRED) plus the
+ * runtime sub-view (runtimeState / replicas / lastError) when present. `--json`
+ * prints the raw `BaasRuntimeStatus`; `--watch` polls until the runtime reaches
+ * a terminal state (RUNNING / FAILED) or the app is no longer ACTIVE.
+ */
+import { Command } from 'commander';
+import type { BaasClient, BaasRuntimeStatus } from '@hsuite/smart-engines-sdk';
+import { connectAndAuth } from '../_lib/baas';
+export type StatusOpts = {
+    envPath: string;
+    gateway: string;
+    /** Management TARGET — the deployed app to inspect. */
+    appId?: string;
+    /** Auth IDENTITY — the developer's subscription appId. */
+    subscriptionAppId?: string;
+    watch?: boolean;
+    /** Poll interval (ms) for --watch. Default 5000. */
+    watchIntervalMs?: number;
+    /** Max --watch polls before giving up. Default 60 (~5 min at 5s). */
+    watchMaxPolls?: number;
+    clientFactory?: Parameters<typeof connectAndAuth>[0]['clientFactory'];
+    /** Injectable sleep for tests. Defaults to setTimeout. */
+    sleep?: (ms: number) => Promise<void>;
+};
+/** A runtime is "settled" once it can no longer transition on its own. */
+export declare function isTerminal(s: BaasRuntimeStatus): boolean;
+/**
+ * Poll a deployed app's runtime until it settles (RUNNING / FAILED /
+ * NOT_DEPLOYED, or the app is no longer ACTIVE) or the poll budget is exhausted.
+ * Shared by `hsuite deploy --wait` / `redeploy --wait` so a deploy blocks until
+ * the runtime actually converges instead of printing a URL that isn't live yet.
+ * Never throws on a FAILED runtime — returns the final status so the caller
+ * decides the exit code.
+ */
+export declare function waitForRunning(client: BaasClient, appId: string, opts?: {
+    intervalMs?: number;
+    maxPolls?: number;
+    sleep?: (ms: number) => Promise<void>;
+}): Promise<BaasRuntimeStatus>;
+/**
+ * Pure orchestration body — exported for unit tests. Returns the final
+ * `BaasRuntimeStatus` (after watching, when `--watch`).
+ */
+export declare function runStatus(opts: StatusOpts): Promise<BaasRuntimeStatus>;
+/** Human-readable one-block render of a status. */
+export declare function renderStatus(status: BaasRuntimeStatus): string;
+export declare const statusCommand: Command;
+//# sourceMappingURL=status.d.ts.map

package/dist/commands/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAK/E,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oDAAoD;IACpD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IACtE,0DAA0D;IAC1D,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,CAAC;AAEF,0EAA0E;AAC1E,wBAAgB,UAAU,CAAC,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAGxD;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAO,GAC3F,OAAO,CAAC,iBAAiB,CAAC,CAY5B;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA+B5E;AAED,mDAAmD;AACnD,wBAAgB,YAAY,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAgB9D;AAED,eAAO,MAAM,aAAa,SAgCtB,CAAC"}

package/dist/commands/status.js

@@ -0,0 +1,138 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.statusCommand = void 0;
+exports.isTerminal = isTerminal;
+exports.waitForRunning = waitForRunning;
+exports.runStatus = runStatus;
+exports.renderStatus = renderStatus;
+/**
+ * `hsuite status` — live lifecycle + runtime status of a deployed app.
+ *
+ * Renders `state` (PENDING_SUBSCRIPTION | ACTIVE | SUSPENDED | RETIRED) plus the
+ * runtime sub-view (runtimeState / replicas / lastError) when present. `--json`
+ * prints the raw `BaasRuntimeStatus`; `--watch` polls until the runtime reaches
+ * a terminal state (RUNNING / FAILED) or the app is no longer ACTIVE.
+ */
+const commander_1 = require("commander");
+const chalk_1 = __importDefault(require("chalk"));
+const env_1 = require("../_lib/env");
+const subscription_env_1 = require("../_lib/subscription-env");
+const cluster_1 = require("../_lib/cluster");
+const baas_1 = require("../_lib/baas");
+/** A runtime is "settled" once it can no longer transition on its own. */
+function isTerminal(s) {
+    const rs = s.runtime?.runtimeState;
+    return s.state !== 'ACTIVE' || rs === 'RUNNING' || rs === 'FAILED' || rs === 'NOT_DEPLOYED';
+}
+/**
+ * Poll a deployed app's runtime until it settles (RUNNING / FAILED /
+ * NOT_DEPLOYED, or the app is no longer ACTIVE) or the poll budget is exhausted.
+ * Shared by `hsuite deploy --wait` / `redeploy --wait` so a deploy blocks until
+ * the runtime actually converges instead of printing a URL that isn't live yet.
+ * Never throws on a FAILED runtime — returns the final status so the caller
+ * decides the exit code.
+ */
+async function waitForRunning(client, appId, opts = {}) {
+    const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    const interval = opts.intervalMs ?? 5000;
+    const maxPolls = opts.maxPolls ?? 60;
+    let status = await client.deployment.status(appId);
+    let polls = 0;
+    while (!isTerminal(status) && polls < maxPolls) {
+        await sleep(interval);
+        status = await client.deployment.status(appId);
+        polls++;
+    }
+    return status;
+}
+/**
+ * Pure orchestration body — exported for unit tests. Returns the final
+ * `BaasRuntimeStatus` (after watching, when `--watch`).
+ */
+async function runStatus(opts) {
+    const env = (0, env_1.readEnv)(opts.envPath);
+    // Auth IDENTITY (subscription) ≠ management TARGET (deployed app). The host
+    // gates /api/v3/baas/auth/* on the authenticated appId's subscription; the deployed
+    // app holds none, so we authenticate as the developer's subscription and
+    // pass the deployed app as the call target.
+    const appId = (0, subscription_env_1.requireAppId)(env, { appId: opts.appId });
+    const subscriptionAppId = (0, subscription_env_1.requireSubscriptionAppId)(env, {
+        subscriptionAppId: opts.subscriptionAppId,
+    });
+    const client = await (0, baas_1.connectAndAuth)({
+        gateway: opts.gateway,
+        env,
+        appId: subscriptionAppId,
+        clientFactory: opts.clientFactory,
+    });
+    let status = await client.deployment.status(appId);
+    if (opts.watch) {
+        const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+        const interval = opts.watchIntervalMs ?? 5000;
+        const maxPolls = opts.watchMaxPolls ?? 60;
+        let polls = 0;
+        while (!isTerminal(status) && polls < maxPolls) {
+            await sleep(interval);
+            status = await client.deployment.status(appId);
+            polls++;
+        }
+    }
+    return status;
+}
+/** Human-readable one-block render of a status. */
+function renderStatus(status) {
+    const lines = [
+        `  appId:        ${status.appId}`,
+        `  state:        ${status.state}`,
+    ];
+    if (status.runtime) {
+        lines.push(`  runtimeState: ${status.runtime.runtimeState}`);
+        lines.push(`  replicas:     ${status.runtime.replicas}`);
+        if (status.runtime.image)
+            lines.push(`  image:        ${status.runtime.image}`);
+        if (status.runtime.lastReconciledAt)
+            lines.push(`  reconciled:   ${status.runtime.lastReconciledAt}`);
+        if (status.runtime.lastError)
+            lines.push(`  lastError:    ${status.runtime.lastError}`);
+    }
+    else {
+        lines.push('  runtime:      (not deployed)');
+    }
+    return lines.join('\n');
+}
+exports.statusCommand = new commander_1.Command('status')
+    .description('Show a deployed app’s lifecycle + runtime status')
+    .option('--env <file>', 'Env file with auth creds', '.env.local')
+    .option('--gateway <url>', 'Smart-engines gateway URL', cluster_1.DEFAULT_GATEWAY)
+    .option('--app-id <id>', 'App to inspect (else DEPLOYED_APP_ID / SUBSCRIPTION_APP_ID)')
+    .option('--subscription-app-id <id>', 'Subscription appId to authenticate as (else SUBSCRIPTION_APP_ID)')
+    .option('--watch', 'Poll until the runtime settles (RUNNING / FAILED)', false)
+    .option('--json', 'Print the raw status JSON', false)
+    .action(async (opts) => {
+    if (!opts.json)
+        console.log(chalk_1.default.bold.cyan('\n  hsuite status\n'));
+    let status;
+    try {
+        status = await runStatus({
+            envPath: opts.env,
+            gateway: opts.gateway,
+            appId: opts.appId,
+            subscriptionAppId: opts.subscriptionAppId,
+            watch: opts.watch,
+        });
+    }
+    catch (err) {
+        console.error(chalk_1.default.red(`\n  ✗ ${err.message}\n`));
+        process.exit(1);
+    }
+    if (opts.json) {
+        process.stdout.write(JSON.stringify(status, null, 2) + '\n');
+        return;
+    }
+    console.log(renderStatus(status));
+    console.log('');
+});
+//# sourceMappingURL=status.js.map

package/dist/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":";;;;;;AAmCA,gCAGC;AAUD,wCAgBC;AAMD,8BA+BC;AAGD,oCAgBC;AAxHD;;;;;;;GAOG;AACH,yCAAoC;AACpC,kDAA0B;AAG1B,qCAAsC;AACtC,+DAAkF;AAClF,6CAAkD;AAClD,uCAA8C;AAmB9C,0EAA0E;AAC1E,SAAgB,UAAU,CAAC,CAAoB;IAC7C,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC;IACnC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,cAAc,CAAC;AAC9F,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,cAAc,CAClC,MAAkB,EAClB,KAAa,EACb,OAA0F,EAAE;IAE5F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,IAAI,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QAC/C,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtB,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,KAAK,EAAE,CAAC;IACV,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,MAAM,GAAG,GAAG,IAAA,aAAO,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,4EAA4E;IAC5E,oFAAoF;IACpF,yEAAyE;IACzE,4CAA4C;IAC5C,MAAM,KAAK,GAAG,IAAA,+BAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,IAAA,2CAAwB,EAAC,GAAG,EAAE;QACtD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAc,EAAC;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG;QACH,KAAK,EAAE,iBAAiB;QACxB,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,IAAI,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEnD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YAC/C,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtB,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/C,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mDAAmD;AACnD,SAAgB,YAAY,CAAC,MAAyB;IACpD,MAAM,KAAK,GAAG;QACZ,mBAAmB,MAAM,CAAC,KAAK,EAAE;QACjC,mBAAmB,MAAM,CAAC,KAAK,EAAE;KAClC,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAChF,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB;YACjC,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1F,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAEY,QAAA,aAAa,GAAG,IAAI,mBAAO,CAAC,QAAQ,CAAC;KAC/C,WAAW,CAAC,kDAAkD,CAAC;KAC/D,MAAM,CAAC,cAAc,EAAE,0BAA0B,EAAE,YAAY,CAAC;KAChE,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,EAAE,yBAAe,CAAC;KACvE,MAAM,CAAC,eAAe,EAAE,6DAA6D,CAAC;KACtF,MAAM,CACL,4BAA4B,EAC5B,kEAAkE,CACnE;KACA,MAAM,CAAC,SAAS,EAAE,mDAAmD,EAAE,KAAK,CAAC;KAC7E,MAAM,CAAC,QAAQ,EAAE,2BAA2B,EAAE,KAAK,CAAC;KACpD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACpE,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,CAAC;YACvB,OAAO,EAAE,IAAI,CAAC,GAAG;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,SAAU,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}