@omnitron-dev/omnitron 0.2.0 → 0.3.1

package/dist/release/store.js

@@ -0,0 +1,257 @@
+/**
+ * What is on this master's disk, as a list.
+ *
+ * `load.ts` opens ONE release and checks every byte of it, because a
+ * deployment is about to ship it. A list is a different question: an operator
+ * looking at twenty releases in a console wants to know what each one is and
+ * what it is worth, and paying a sha256 over two gigabytes to draw a table
+ * would make the page unusable. So this reads manifests and sizes, says
+ * plainly when a directory has no manifest — a build that failed leaves its
+ * logs and nothing else — and leaves the verification to the deployment.
+ *
+ * Both readers use it: `commands/release.ts` prints these rows, and
+ * `services/release.rpc-service.ts` sends them to the console, so the two
+ * never drift into two answers about one disk.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { loadAttestations } from './attest.js';
+import { releasesRoot } from './load.js';
+export { releasesRoot };
+/** `sample-202609221432-81c8a074-c64963f6` → `sample`; a name may hold dashes too. */
+export function projectOfId(id) {
+    return id.replace(/-\d{12}-[0-9a-f]{8}-[0-9a-f]{8}$/, '');
+}
+/**
+ * What a release WEIGHS, without walking the build root.
+ *
+ * `src/` holds the two clones — with their `node_modules`, several hundred
+ * thousand files — and it is transient: removed when a build ends, passed,
+ * failed or stopped, unless `--keep-source` (`runReleaseBuild`). Only a build
+ * whose process was killed outright leaves one, and `prune` takes it with its
+ * release — saying so, since its size is not in the number. Walking it to
+ * draw a table is what a list must never do: measured here, the console sat
+ * on skeleton rows for the whole of a build because `dirBytes` was counting
+ * the clones as they were being written.
+ *
+ * So the size is what the release CARRIES — artifacts, statics, logs — and
+ * the presence of the clones is reported as a fact instead of a number.
+ */
+function releaseBytes(dir) {
+    let keptSource = false;
+    let entries;
+    try {
+        entries = fs.readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        return { bytes: 0, keptSource: false };
+    }
+    let bytes = 0;
+    for (const entry of entries) {
+        if (entry.name === 'src') {
+            keptSource = true;
+            continue;
+        }
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory())
+            bytes += dirBytes(full);
+        else if (entry.isFile()) {
+            try {
+                bytes += fs.statSync(full).size;
+            }
+            catch {
+                // Removed while we read; it is not in the total either way.
+            }
+        }
+    }
+    return { bytes, keptSource };
+}
+/** Bytes under a directory. Unreadable or absent counts as zero, not as a failure. */
+export function dirBytes(dir) {
+    let bytes = 0;
+    const walk = (d) => {
+        let entries;
+        try {
+            entries = fs.readdirSync(d, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const full = path.join(d, entry.name);
+            if (entry.isDirectory())
+                walk(full);
+            else if (entry.isFile()) {
+                try {
+                    bytes += fs.statSync(full).size;
+                }
+                catch {
+                    // Removed while we walked; it is not in the total either way.
+                }
+            }
+        }
+    };
+    walk(dir);
+    return bytes;
+}
+function summarise(id, dir, manifest) {
+    const gates = manifest?.gates ?? [];
+    const weight = releaseBytes(dir);
+    return {
+        id,
+        project: projectOfId(id),
+        complete: manifest !== null,
+        builtAt: manifest?.builtAt ?? null,
+        builtBy: manifest?.builtBy ?? null,
+        builtWith: manifest?.builtWith?.omnitron ?? null,
+        projectCommit: manifest?.project.commit ?? null,
+        omniCommit: manifest?.omni.commit ?? null,
+        projectRepo: manifest?.project.repo ?? null,
+        omniRepo: manifest?.omni.repo ?? null,
+        onRemote: { project: manifest?.project.onRemote ?? null, omni: manifest?.omni.onRemote ?? null },
+        gates: {
+            total: gates.length,
+            passed: gates.filter((g) => g.status === 'passed').length,
+            failed: gates.filter((g) => g.status === 'failed').length,
+            // Only a gate that did not run. `notRun` counted everything that was
+            // neither passed nor failed, so a gate that RAN and did not answer in
+            // time was reported as one that never started: sample-202609230557's
+            // `unit:payments` timed out («ETIMEDOUT», 0 tests failed) and the list
+            // said `notRun: 1`. `manifest.ts` keeps the three apart on purpose — a
+            // timeout and a kill are the machine's verdict, an absence is nobody's —
+            // and a count that merges them undoes that for every reader of JSON.
+            notRun: gates.filter((g) => g.status === 'not-run').length,
+            timedOut: gates.filter((g) => g.status === 'timed-out').length,
+            killed: gates.filter((g) => g.status === 'killed').length,
+        },
+        gateList: gates,
+        artifacts: {
+            count: manifest?.artifacts.length ?? 0,
+            bytes: (manifest?.artifacts ?? []).reduce((sum, a) => sum + a.bytes, 0),
+            apps: (manifest?.artifacts ?? []).map((a) => `${a.app}@${a.version}`),
+            failed: (manifest?.artifactFailures ?? []).map((f) => f.app),
+        },
+        statics: manifest?.statics ?? null,
+        machine: manifest?.machine ?? null,
+        verified: loadAttestations(id, path.dirname(dir)).map((a) => ({
+            stack: a.stack,
+            passed: a.gates.filter((g) => g.status === 'passed').length,
+            total: a.gates.length,
+            at: a.at,
+        })),
+        bytes: weight.bytes,
+        keptSource: weight.keptSource,
+    };
+}
+function readManifest(dir) {
+    const file = path.join(dir, 'manifest.json');
+    try {
+        const manifest = JSON.parse(fs.readFileSync(file, 'utf8'));
+        return manifest && typeof manifest.id === 'string' ? manifest : null;
+    }
+    catch {
+        // No manifest, or one nothing can parse: an unfinished build, listed as such.
+        return null;
+    }
+}
+/** Every release on this machine, newest build first; unfinished ones last. */
+export function listReleases(root = releasesRoot()) {
+    let entries;
+    try {
+        entries = fs.readdirSync(root, { withFileTypes: true });
+    }
+    catch {
+        return [];
+    }
+    return entries
+        .filter((e) => e.isDirectory())
+        .map((e) => summarise(e.name, path.join(root, e.name), readManifest(path.join(root, e.name))))
+        .sort((a, b) => (a.builtAt ?? '') < (b.builtAt ?? '') ? 1 : (a.builtAt ?? '') > (b.builtAt ?? '') ? -1 : a.id < b.id ? 1 : -1);
+}
+/** A release id names a directory under the root, and nothing outside it. */
+function isReleaseId(id) {
+    return /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(id) && !id.includes('..');
+}
+/**
+ * One release's manifest, unchecked — or null when there is none: not built
+ * here, pruned, or a build that did not finish.
+ *
+ * For comparing what a release says with what another one says, which needs
+ * neither the sizes of the directory nor a sha256 of its tarballs.
+ */
+export function readReleaseManifest(id, root = releasesRoot()) {
+    return isReleaseId(id) ? readManifest(path.join(root, id)) : null;
+}
+/** One release, with its manifest and the logs its build left. */
+export function readReleaseDetail(id, root = releasesRoot()) {
+    if (!isReleaseId(id))
+        throw new Error(`'${id}' is not a release id`);
+    const dir = path.join(root, id);
+    if (!fs.existsSync(dir))
+        throw new Error(`No release '${id}' on this machine — ${dir} does not exist`);
+    const manifest = readManifest(dir);
+    let logs = [];
+    try {
+        logs = fs
+            .readdirSync(path.join(dir, 'logs'), { withFileTypes: true })
+            .filter((e) => e.isFile())
+            .map((e) => ({ name: e.name, bytes: fs.statSync(path.join(dir, 'logs', e.name)).size }));
+    }
+    catch {
+        // A build that never reached its first step wrote no logs.
+    }
+    return { ...summarise(id, dir, manifest), manifest, logs, root: dir, attestations: loadAttestations(id, root) };
+}
+/**
+ * The tail of one of a release's logs.
+ *
+ * The console shows these while a build runs and after it fails, so the name
+ * is checked against the directory rather than joined blind: a log name is a
+ * file name, never a path.
+ */
+export function readReleaseLog(id, name, lines = 200, root = releasesRoot()) {
+    const detail = readReleaseDetail(id, root);
+    const known = detail.logs.find((l) => l.name === name);
+    if (!known) {
+        throw new Error(`Release ${id} has no log '${name}' — it has ${detail.logs.map((l) => l.name).join(', ') || 'none'}`);
+    }
+    const file = path.join(detail.root, 'logs', name);
+    const text = fs.readFileSync(file, 'utf8');
+    const capped = Math.min(Math.max(1, Math.floor(lines)), 5000);
+    return { name, bytes: known.bytes, tail: text.trimEnd().split('\n').slice(-capped).join('\n') };
+}
+/**
+ * Remove all but the newest `keep` releases.
+ *
+ * Deliberately blunt and deliberately explicit: it does not know which
+ * release a stack is running — the `stack.start` rows do — so it never
+ * decides that for itself, and it deletes nothing unless told to
+ * (`apply`). `protect` is how a caller that DOES know keeps one: the console
+ * and `omnitron release prune` pass the releases their stacks last deployed.
+ */
+export function pruneReleases(options = {}) {
+    const keep = options.keep ?? 5;
+    if (!Number.isInteger(keep) || keep < 0)
+        throw new Error(`keep takes a whole number of releases, not ${String(options.keep)}`);
+    const root = options.root ?? releasesRoot();
+    const protect = new Set(options.protect ?? []);
+    const all = listReleases(root);
+    const old = all.slice(keep);
+    const spared = old.filter((r) => protect.has(r.id)).map((r) => r.id);
+    const doomed = old.filter((r) => !protect.has(r.id)).map((r) => ({ id: r.id, bytes: r.bytes, keptSource: r.keptSource }));
+    const removed = [];
+    if (options.apply) {
+        for (const d of doomed) {
+            fs.rmSync(path.join(root, d.id), { recursive: true, force: true });
+            removed.push(d.id);
+        }
+    }
+    return {
+        doomed,
+        removed,
+        kept: all.length - doomed.length,
+        freedBytes: doomed.reduce((sum, d) => sum + d.bytes, 0),
+        spared,
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/release/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/release/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAA0B,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,EAAE,YAAY,EAAE,CAAC;AAiExB,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,OAAO,EAAE,CAAC,OAAO,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACzB,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;aAC5C,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC/B,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;iBAC/B,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,8DAA8D;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,EAAU,EAAE,GAAW,EAAE,QAAgC;IAC1E,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO;QACL,EAAE;QACF,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QACxB,QAAQ,EAAE,QAAQ,KAAK,IAAI;QAC3B,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,IAAI;QAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,IAAI;QAClC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI,IAAI;QAChD,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;QAC/C,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;QACzC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;QAC3C,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACrC,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE;QAChG,KAAK,EAAE;YACL,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;YACzD,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;YACzD,qEAAqE;YACrE,sEAAsE;YACtE,qEAAqE;YACrE,uEAAuE;YACvE,uEAAuE;YACvE,yEAAyE;YACzE,qEAAqE;YACrE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;YAC1D,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;YAC9D,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;SAC1D;QACD,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE;YACT,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC;YACtC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACvE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACrE,MAAM,EAAE,CAAC,QAAQ,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SAC7D;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,IAAI;QAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,IAAI;QAClC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5D,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;YAC3D,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM;YACrB,EAAE,EAAE,CAAC,CAAC,EAAE;SACT,CAAC,CAAC;QACH,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAoB,CAAC;QAC9E,OAAO,QAAQ,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAI,GAAW,YAAY,EAAE;IACxD,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAC7F,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnI,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,EAAU;IAC7B,OAAO,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAU,EAAE,IAAI,GAAW,YAAY,EAAE;IAC3E,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,EAAU,EAAE,IAAI,GAAW,YAAY,EAAE;IACzE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,uBAAuB,GAAG,iBAAiB,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,IAAI,GAA2C,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,IAAI,GAAG,EAAE;aACN,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC5D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;IACD,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;AAClH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAU,EACV,IAAY,EACZ,KAAK,GAAG,GAAG,EACX,IAAI,GAAW,YAAY,EAAE;IAE7B,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,gBAAgB,IAAI,cAAc,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAClG,CAAC;AAsBD;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAO,GAAmF,EAAE;IAE5F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/H,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC1H,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM;QACN,OAAO;QACP,IAAI,EAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAChC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACvD,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/services/alert.rpc-service.d.ts

@@ -3,23 +3,15 @@
  *
  * Netron RPC endpoints for alert management from webapp.
  */
-import type { AlertService, AlertRule, AlertEvent, AlertSummary } from './alert.service.js';
-export declare class AlertRpcService {
+import type { AlertService } from './alert.service.js';
+import type { AlertRule, AlertEvent, AlertSummary, ActiveAlert, CreateAlertRuleInput, UpdateAlertRuleInput } from '../shared/dto/alerts.js';
+import type { IOmnitronAlertsService } from '../shared/dto/services.js';
+export declare class AlertRpcService implements IOmnitronAlertsService {
     private readonly alertService;
     constructor(alertService: AlertService);
     getRules(): Promise<AlertRule[]>;
-    createRule(data: {
-        name: string;
-        expression: string;
-        type: string;
-        severity: string;
-        forDuration?: number;
-        enabled?: boolean;
-    }): Promise<AlertRule>;
-    updateRule(data: {
-        id: string;
-        updates: Partial<AlertRule>;
-    }): Promise<AlertRule>;
+    createRule(data: CreateAlertRuleInput): Promise<AlertRule>;
+    updateRule(data: UpdateAlertRuleInput): Promise<AlertRule>;
     deleteRule(data: {
         id: string;
     }): Promise<{
@@ -30,12 +22,16 @@ export declare class AlertRpcService {
         status?: string;
         limit?: number;
     }): Promise<AlertEvent[]>;
+    /** The acknowledger is the caller, from the session — the payload names only the alert. */
     acknowledgeAlert(data: {
         alertId: string;
-        acknowledgedBy: string;
     }): Promise<{
         success: boolean;
     }>;
+    /** Firing alerts joined with their rule — what the console lists. */
+    getActiveAlerts(data?: {
+        limit?: number;
+    }): Promise<ActiveAlert[]>;
     getSummary(): Promise<AlertSummary>;
 }
 //# sourceMappingURL=alert.rpc-service.d.ts.map

package/dist/services/alert.rpc-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"alert.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/alert.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE5F,qBACa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE,YAAY;IAGjD,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAKhC,UAAU,CAAC,IAAI,EAAE;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,GAAG,OAAO,CAAC,SAAS,CAAC;IAchB,UAAU,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAKjF,UAAU,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAM/D,SAAS,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAK7F,gBAAgB,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAMlG,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC;CAG1C"}
+{"version":3,"file":"alert.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/alert.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AASxE,qBACa,eAAgB,YAAW,sBAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY;IAAzC,YAA6B,YAAY,EAAE,YAAY,EAAI;IAGrD,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAErC;IAGK,UAAU,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,CAAC,CAE/D;IAGK,UAAU,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,CAAC,CAG/D;IAGK,UAAU,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAGpE;IAGK,SAAS,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAElG;IAED,2FAA2F;IAErF,gBAAgB,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAI/E;IAED,qEAAqE;IAE/D,eAAe,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAEvE;IAGK,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC,CAExC;CACF"}

package/dist/services/alert.rpc-service.js

@@ -13,7 +13,18 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 import { Service, Public } from '@omnitron-dev/titan/decorators';
+import { Errors } from '@omnitron-dev/titan/errors';
 import { VIEWER_ROLES, OPERATOR_ROLES } from '../shared/roles.js';
+import { readAlertRuleFields } from '../shared/alert-expression.js';
+import { requireAuth } from './auth-context.js';
+import { requirePayload, requireString } from './anonymous-input.js';
+/** The fields `readAlertRuleFields` checked — the same function the console's form runs. */
+function checked(input, partial, method) {
+    const { fields, problems } = readAlertRuleFields(input, partial);
+    if (problems.length > 0)
+        throw Errors.badRequest(`${method}: ${problems.join('; ')}`);
+    return fields;
+}
 let AlertRpcService = class AlertRpcService {
     alertService;
     constructor(alertService) {
@@ -23,30 +34,28 @@ let AlertRpcService = class AlertRpcService {
         return this.alertService.getRules();
     }
     async createRule(data) {
-        return this.alertService.createRule({
-            name: data.name,
-            expression: data.expression,
-            type: data.type,
-            severity: data.severity,
-            forDuration: data.forDuration ?? null,
-            annotations: null,
-            labels: null,
-            enabled: data.enabled ?? true,
-        });
+        return this.alertService.createRule(checked(data, false, 'createRule'));
     }
     async updateRule(data) {
-        return this.alertService.updateRule(data.id, data.updates);
+        const id = requireString(requirePayload(data, 'updateRule'), 'id', 'updateRule');
+        return this.alertService.updateRule(id, checked(data, true, 'updateRule'));
     }
     async deleteRule(data) {
-        await this.alertService.deleteRule(data.id);
+        await this.alertService.deleteRule(requireString(requirePayload(data, 'deleteRule'), 'id', 'deleteRule'));
         return { success: true };
     }
     async getEvents(data) {
         return this.alertService.getEvents(data);
     }
+    /** The acknowledger is the caller, from the session — the payload names only the alert. */
     async acknowledgeAlert(data) {
-        await this.alertService.acknowledgeAlert(data.alertId, data.acknowledgedBy);
-        return { success: true };
+        const alertId = requireString(requirePayload(data, 'acknowledgeAlert'), 'alertId', 'acknowledgeAlert');
+        const success = await this.alertService.acknowledgeAlert(alertId, requireAuth().userId);
+        return { success };
+    }
+    /** Firing alerts joined with their rule — what the console lists. */
+    async getActiveAlerts(data) {
+        return this.alertService.getActiveAlerts(data?.limit);
     }
     async getSummary() {
         return this.alertService.getSummary();
@@ -88,6 +97,12 @@ __decorate([
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], AlertRpcService.prototype, "acknowledgeAlert", null);
+__decorate([
+    Public({ auth: { roles: VIEWER_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AlertRpcService.prototype, "getActiveAlerts", null);
 __decorate([
     Public({ auth: { roles: VIEWER_ROLES } }),
     __metadata("design:type", Function),

package/dist/services/alert.rpc-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"alert.rpc-service.js","sourceRoot":"","sources":["../../src/services/alert.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAI3D,IAAM,eAAe,GAArB,MAAM,eAAe;IACG;IAA7B,YAA6B,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAGrD,AAAN,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,IAOhB;QACC,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAW;YACtB,QAAQ,EAAE,IAAI,CAAC,QAAe;YAC9B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;SAC9B,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,IAAiD;QAChE,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,IAAoB;QACnC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAC,IAA2D;QACzE,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB,CAAC,IAAiD;QACtE,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;IACxC,CAAC;CACF,CAAA;AAnDO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;+CAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;iDAmB3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;iDAG3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;iDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;gDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;uDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;iDAGzC;AAtDU,eAAe;IAD3B,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;;GACvB,eAAe,CAuD3B"}
+{"version":3,"file":"alert.rpc-service.js","sourceRoot":"","sources":["../../src/services/alert.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAwB,MAAM,+BAA+B,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAYrE,4FAA4F;AAC5F,SAAS,OAAO,CAAC,KAAc,EAAE,OAAgB,EAAE,MAAc;IAC/D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC;AAChB,CAAC;AAGM,IAAM,eAAe,GAArB,MAAM,eAAe;IACG,YAAY;IAAzC,YAA6B,YAA0B;4BAA1B,YAAY;IAAiB,CAAC;IAGrD,AAAN,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,IAA0B;QACzC,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAoB,CAAC,CAAC;IAC7F,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,IAA0B;QACzC,MAAM,EAAE,GAAG,aAAa,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IAC7E,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,IAAoB;QACnC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QAC1G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAC,IAA2D;QACzE,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,2FAA2F;IAErF,AAAN,KAAK,CAAC,gBAAgB,CAAC,IAAyB;QAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACvG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;QACxF,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAED,qEAAqE;IAE/D,AAAN,KAAK,CAAC,eAAe,CAAC,IAAyB;QAC7C,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;IACxC,CAAC;CACF,CAAA;AA5CO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;+CAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;iDAG3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;iDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;iDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;gDAGzC;AAIK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;uDAK3C;AAIK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;sDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;iDAGzC;AA/CU,eAAe;IAD3B,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;;GACvB,eAAe,CAgD3B"}

package/dist/services/alert.service.d.ts

@@ -1,83 +1,120 @@
 /**
- * Alert Service — Rule-based alerting engine
+ * Alert Service — rule-based alerting.
  *
- * Evaluates alert rules at configurable intervals and fires/resolves alerts.
- * Supports three rule types:
- *   - metric: threshold-based (e.g., CPU > 80%)
- *   - log: pattern matching (e.g., level=error AND app=main count > 10/5min)
- *   - health: health status changes (e.g., app goes unhealthy)
+ * The daemon scheduler's `alert-evaluation` job calls `evaluate()` every
+ * `monitoring.healthCheck.interval` (15 s by default). A rule is an
+ * expression of `shared/alert-expression.ts` — an app's status, cpu or
+ * memory, a container's health, or the space free on this host's disk — and
+ * what it watches (`health` or `metric`) is read off it.
  *
- * Alert lifecycle: pending → firing → resolved (or silenced/acknowledged)
+ * Lifecycle: a condition that holds becomes PENDING for the rule's
+ * `forDuration` (kept in this process: a restart starts the wait again), then
+ * FIRING, then RESOLVED when it stops holding. Acknowledging a firing alert
+ * records who and when; it stays firing until the condition clears.
  *
- * Stores alert rules and events in omnitron-pg.
+ * Rules and events are stored in omnitron-pg; the defaults a fresh master
+ * starts with are seeded once by migrations 011 and 012, and are the
+ * operator's after.
  */
-import type { Kysely } from 'kysely';
+import { type Kysely } from 'kysely';
 import type { OmnitronDatabase } from '../database/schema.js';
 import type { OrchestratorService } from '../orchestrator/orchestrator.service.js';
-export type AlertSeverity = 'critical' | 'warning' | 'info';
-export type AlertRuleType = 'metric' | 'log' | 'health';
-export type AlertEventStatus = 'firing' | 'resolved' | 'silenced' | 'acknowledged';
-export interface AlertRule {
-    id: string;
-    name: string;
-    expression: string;
-    type: AlertRuleType;
-    severity: AlertSeverity;
-    forDuration: number | null;
-    annotations: Record<string, unknown> | null;
-    labels: Record<string, unknown> | null;
-    enabled: boolean;
-    lastEvaluatedAt: string | null;
-    createdAt: string;
-    updatedAt: string;
-}
-export interface AlertEvent {
-    id: string;
-    ruleId: string;
-    status: AlertEventStatus;
-    value: string | null;
-    annotations: Record<string, unknown> | null;
-    firedAt: string;
-    resolvedAt: string | null;
-    acknowledgedAt: string | null;
-    acknowledgedBy: string | null;
-}
-export interface AlertSummary {
-    firing: number;
-    resolved: number;
-    silenced: number;
-    total: number;
-    bySeverity: Record<string, number>;
-}
+import { type ILoggerModule } from '@omnitron-dev/titan/module/logger';
+import { ALERT_EXPRESSION_FORMS, isAlertExpressionParseable, type AlertRuleFields } from '../shared/alert-expression.js';
+export { ALERT_EXPRESSION_FORMS, isAlertExpressionParseable };
+import type { ProjectService } from './project.service.js';
+import type { ContainerState } from '../infrastructure/types.js';
+import type { AlertRule, AlertEvent, AlertSummary, ActiveAlert } from '../shared/dto/alerts.js';
+export type { AlertSeverity, AlertRuleType, AlertEventStatus, AlertRule, AlertEvent, AlertSummary, CreateAlertRuleInput, UpdateAlertRuleInput, } from '../shared/dto/alerts.js';
+/** An undelivered critical alert on a daemon that runs no project naming a sink. */
+export declare const NO_SINK = "no alert sink: no project this daemon runs names one (monitoring.alertSink)";
+/**
+ * One word for a container's health, as an `infra.<name>.health` rule reads
+ * it: `healthy`, `starting`, `unhealthy` or `stopped`.
+ *
+ * A container without a healthcheck reports `none`; running is then the only
+ * sign there is, and it reads `healthy` — otherwise `infra.*.health !=
+ * healthy` would fire for ever on tor and every other image that declares no
+ * check. One that is running but detached from every network serves nothing
+ * and reads `unhealthy`.
+ */
+export declare function containerHealth(state: Pick<ContainerState, 'status' | 'health' | 'networkAttached'>): string;
 export declare class AlertService {
     private readonly db;
     private readonly orchestrator;
-    private readonly infraState;
-    private evaluationTimer;
-    constructor(db: Kysely<OmnitronDatabase>, orchestrator: OrchestratorService, infraState: () => Record<string, {
-        status: string;
-        health: string;
-    }>);
+    private readonly projects?;
+    private readonly logger;
+    /**
+     * When each rule's condition began to hold, for a rule that must hold for
+     * `forDuration` before it fires. In memory: a daemon restart starts every
+     * wait again, which errs toward firing later rather than at once.
+     */
+    private readonly pendingSince;
+    constructor(loggerModule: ILoggerModule, db: Kysely<OmnitronDatabase>, orchestrator: OrchestratorService, projects?: Partial<Pick<ProjectService, 'getInfraManager' | 'listProjects' | 'loadProjectConfig'>> | undefined);
+    /** Every container of every stack on this machine, by container name. */
+    private infraState;
+    /**
+     * Evaluate all enabled alert rules — once per scheduler tick. `now` is a
+     * parameter for the court that walks a rule through its wait.
+     */
+    evaluate(now?: number): Promise<void>;
+    /** Each project's alert sink, read from its config at most once a minute. */
+    private sinkCache;
+    private alertSinks;
     /**
-     * Start the alert evaluation loop.
-     * Runs every `intervalMs` (default 15s).
+     * The critical alerts the platform's alert sink has not taken yet, handed to
+     * it — every tick until it takes them (migration 013). The sink is an app of
+     * each stack of the sink's project this daemon runs (`sample/dev/main` on the
+     * master, `sample/test/main` on its node): a daemon delivers its own alerts to
+     * the stacks it runs, and a node's never wait for the master to be awake.
+     * The call takes `exec`'s road — the supervisor's socket into the process —
+     * and only into an app in bootstrap mode.
      */
-    start(intervalMs?: number): void;
-    stop(): void;
+    private deliverPending;
+    /** The apps a sink names on the stacks of its project this daemon runs. */
+    private sinkTargets;
+    /** One transition to every target: the first failure, or null when every one took it. */
+    private deliverTo;
     /**
-     * Evaluate all enabled alert rules.
+     * A critical alert's fire and its end, on the master's desktop — at the
+     * transition, once, never per tick (monitoring/desktop-notifier.ts).
      */
-    evaluate(): Promise<void>;
+    private sayOnDesktop;
     getRules(): Promise<AlertRule[]>;
-    createRule(rule: Omit<AlertRule, 'id' | 'createdAt' | 'updatedAt' | 'lastEvaluatedAt'>): Promise<AlertRule>;
-    updateRule(id: string, updates: Partial<Omit<AlertRule, 'id' | 'createdAt' | 'updatedAt'>>): Promise<AlertRule>;
+    /** A rule from fields `readAlertRuleFields` checked; what it watches is read off its expression. */
+    createRule(rule: AlertRuleFields): Promise<AlertRule>;
+    /** Whatever the update carries, checked the same way; a new expression is a new type. */
+    updateRule(id: string, updates: Partial<AlertRuleFields>): Promise<AlertRule>;
     deleteRule(id: string): Promise<void>;
     getEvents(options?: {
         ruleId?: string;
         status?: string;
         limit?: number;
     }): Promise<AlertEvent[]>;
-    acknowledgeAlert(alertId: string, acknowledgedBy: string): Promise<void>;
+    /**
+     * Firing and acknowledged alerts, joined with their rule.
+     *
+     * Resolved events are excluded: this answers "what needs attention now".
+     * The message prefers the rule's `summary` annotation and falls back to the
+     * expression and the observed value, so an alert always renders as
+     * something a human can act on.
+     */
+    getActiveAlerts(limit?: number): Promise<ActiveAlert[]>;
+    /**
+     * Record who acknowledged a firing alert, and when. Only a firing one: a
+     * resolved alert has nobody left to answer. And only the first time: the
+     * moment it was taken, by whom, is the fact — a second click is not a
+     * second taking.
+     *
+     * The acknowledger is the caller the RPC read from the session — it was a
+     * field of the request, so anyone could sign an acknowledgement with
+     * another operator's name. A console session is recorded by its account's
+     * username; the CLI, admitted on the unix socket as `omnitron-local`, as
+     * that — the audit trail's convention. Looked up by text, because
+     * `omnitron-local` is no uuid and a uuid comparison would refuse the whole
+     * acknowledgement over it.
+     */
+    acknowledgeAlert(alertId: string, userId: string): Promise<boolean>;
     getSummary(): Promise<AlertSummary>;
 }
 //# sourceMappingURL=alert.service.d.ts.map

package/dist/services/alert.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"alert.service.d.ts","sourceRoot":"","sources":["../../src/services/alert.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAMnF,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAC5D,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;AACxD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,cAAc,CAAC;AAEnF,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AA+ED,qBAAa,YAAY;IAIrB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAL7B,OAAO,CAAC,eAAe,CAA+B;gBAGnC,EAAE,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAC5B,YAAY,EAAE,mBAAmB,EACjC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAGvF;;;OAGG;IACH,KAAK,CAAC,UAAU,SAAS,GAAG,IAAI;IAQhC,IAAI,IAAI,IAAI;IAOZ;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IA4DzB,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAKhC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,GAAG,iBAAiB,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAc3G,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAY/G,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,SAAS,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAQhG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxE,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC;CA0C1C"}
+{"version":3,"file":"alert.service.d.ts","sourceRoot":"","sources":["../../src/services/alert.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAO,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAEnF,OAAO,EAAwB,KAAK,aAAa,EAAgB,MAAM,mCAAmC,CAAC;AAC3G,OAAO,EACL,sBAAsB,EAGtB,0BAA0B,EAC1B,KAAK,eAAe,EACrB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,CAAC;AAE9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAiB,MAAM,yBAAyB,CAAC;AAU/G,YAAY,EACV,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,YAAY,EACZ,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AA4GjC,oFAAoF;AACpF,eAAO,MAAM,OAAO,gFAAgF,CAAC;AAgBrG;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,CAAC,GAAG,MAAM,CAM5G;AAMD,qBACa,YAAY;IAYM,OAAO,CAAC,QAAQ,CAAC,EAAE;IAClB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAMzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAlB5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IAEjC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAE1D,YACgC,YAAY,EAAE,aAAa,EACb,EAAE,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAC3B,YAAY,EAAE,mBAAmB,EAM7D,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,iBAAiB,GAAG,cAAc,GAAG,mBAAmB,CAAC,CAAC,YAAA,EAGpH;IAED,yEAAyE;IACzE,OAAO,CAAC,UAAU;IAUlB;;;OAGG;IACG,QAAQ,CAAC,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwGtD;IAED,6EAA6E;IAC7E,OAAO,CAAC,SAAS,CAA+E;YAElF,UAAU;IAgBxB;;;;;;;;OAQG;YACW,cAAc;IAoE5B,2EAA2E;IAC3E,OAAO,CAAC,WAAW;IAUnB,yFAAyF;YAC3E,SAAS;IA8BvB;;;OAGG;IACH,OAAO,CAAC,YAAY;IAcd,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAGrC;IAED,oGAAoG;IAC9F,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAW1D;IAED,yFAAyF;IACnF,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAkBlF;IAEK,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1C;IAEK,SAAS,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAMrG;IAED;;;;;;;OAOG;IACG,eAAe,CAAC,KAAK,SAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CA0DzD;IAED;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAcxE;IAEK,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC,CAuCxC;CACF"}