@styleflow.app/flowpress-deploy 1.0.0-beta.3 → 1.0.0-beta.31

package/dist/ops/provision.js

@@ -0,0 +1,268 @@
+import { randomBytes } from "node:crypto";
+import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
+import { allowedComponents, ensureSecrets, identity, imageRepository, loadState, operatorEnvironment, platformConfig, publicPlatform, readEnv, saveState, targetConfig } from "./config.js";
+import { cmsEnvironment, manifestEnvironment, resolveFrontendEnvironment } from "./environment.js";
+import { coolifyClient } from "./coolify.js";
+import { shellQuote, ssh, sleep } from "./process.js";
+const list = data => Array.isArray(data) ? data : data?.data || [];
+export function sqlIdentifier(value) {
+    if (!/^[a-z][a-z0-9]{1,63}$/.test(value || ""))
+        throw new Error("SQL identifiers must be lowercase alphanumeric; wildcards are forbidden.");
+    return value;
+}
+export function schemaSql(values) {
+    const name = sqlIdentifier(values.DB_NAME), user = sqlIdentifier(values.DB_USER);
+    if (!/^[a-f0-9]{64}$/.test(values.DB_PASSWORD))
+        throw new Error("Expected a generated 256-bit database password.");
+    return "CREATE DATABASE IF NOT EXISTS " + name + " CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;\n"
+        + "CREATE USER IF NOT EXISTS '" + user + "'@'%' IDENTIFIED BY '" + values.DB_PASSWORD + "' WITH MAX_USER_CONNECTIONS 12 MAX_STATEMENT_TIME 60;\n"
+        + "GRANT ALL PRIVILEGES ON " + name + ".* TO '" + user + "'@'%';\n";
+}
+export function poolSecretsPath(root, platformId) {
+    return operatorEnvironment(root).FLOWPRESS_PLATFORM_SECRETS_FILE || join(root, ".secrets", "platform-" + platformId + ".env");
+}
+export function poolSecrets(root, platformId, { create = false } = {}) {
+    const file = poolSecretsPath(root, platformId);
+    const current = readEnv(file);
+    if (!current.POOL_ROOT_PASSWORD) {
+        if (!create)
+            throw new Error("The shared pool operator secret is missing. Restore it from the private platform vault.");
+        mkdirSync(dirname(file), { recursive: true, mode: 0o700 });
+        current.POOL_ROOT_PASSWORD = randomBytes(32).toString("hex");
+        writeFileSync(file, "POOL_ROOT_PASSWORD=" + current.POOL_ROOT_PASSWORD + "\n", { mode: 0o600 });
+    }
+    return current;
+}
+export function poolSql(platform, password, sql) {
+    if (!/^[a-z0-9]+$/.test(platform.poolUuid || "") || !password || /[\r\n]/.test(password))
+        throw new Error("Invalid shared pool credentials.");
+    const command = "docker exec -i " + platform.poolUuid + " sh -c "
+        + shellQuote('read -r MYSQL_PWD; export MYSQL_PWD; exec mariadb -uroot --batch --skip-column-names');
+    return ssh(platform, command, { input: password + "\n" + sql });
+}
+async function waitPool(api, uuid) {
+    for (let attempt = 0; attempt < 60; attempt++) {
+        const pool = await api("GET", "/databases/" + uuid);
+        if (pool.status === "running:healthy")
+            return;
+        await sleep(3000);
+    }
+    throw new Error("Shared MariaDB did not start.");
+}
+export async function provisionPlatform(root, manifest, { file, apply = false } = {}) {
+    const path = file || process.env.FLOWPRESS_PLATFORMS_FILE;
+    if (!path)
+        throw new Error("A platform catalog file is required.");
+    const catalog = parseYaml(readFileSync(path, "utf8"));
+    const binding = catalog.platforms?.[manifest.platform];
+    if (!binding)
+        throw new Error("Platform not configured.");
+    const platform = platformConfig(root, manifest, path);
+    const operator = operatorEnvironment(root);
+    const api = coolifyClient(platform.coolifyUrl, operator.COOLIFY_TOKEN);
+    if (!/^[a-zA-Z0-9_-]+$/.test(platform.network || "") || !/^10\.\d+\.\d+\.0\/24$/.test(platform.subnet || ""))
+        throw new Error("Explicit private network name and /24 subnet required.");
+    const save = () => {
+        if (apply) {
+            for (const key of ["destinationUuid", "poolUuid"])
+                if (platform[key])
+                    binding[key] = platform[key];
+            writeFileSync(path, stringifyYaml(catalog));
+        }
+    };
+    const actions = [];
+    const projects = list(await api("GET", "/projects"));
+    let project = projects.find(item => item.name === "flowpress-platform");
+    if (!project) {
+        actions.push("Create shared platform project");
+        if (apply)
+            project = await api("POST", "/projects", { name: "flowpress-platform", description: "Shared FlowPress infrastructure. No client content." });
+    }
+    if (!platform.destinationUuid) {
+        const destinations = list(await api("GET", "/destinations"));
+        let destination = destinations.find(item => item.network === platform.network && item.server?.uuid === platform.serverUuid);
+        if (!destination) {
+            actions.push("Create data network " + platform.network + " (" + platform.subnet + ")");
+            if (apply) {
+                const existing = ssh(platform, "docker network ls --filter name=^" + platform.network + "$ --format '{{.Name}}'");
+                if (!existing) {
+                    const networks = ssh(platform, "docker network ls -q | xargs docker network inspect --format '{{range .IPAM.Config}}{{.Subnet}}{{\"\\n\"}}{{end}}'");
+                    const number = ip => ip.split(".").reduce((result, part) => ((result << 8) >>> 0) + Number(part), 0) >>> 0;
+                    const desired = number(platform.subnet.split("/")[0]);
+                    for (const subnet of networks.split(/\s+/).filter(value => /^\d+\.\d+\.\d+\.\d+\/\d+$/.test(value))) {
+                        const [address, prefix] = subnet.split("/");
+                        const mask = (0xffffffff << (32 - Math.min(24, Number(prefix)))) >>> 0;
+                        if ((number(address) & mask) === (desired & mask))
+                            throw new Error("Network subnet overlaps " + subnet);
+                    }
+                    ssh(platform, "docker network create --subnet " + shellQuote(platform.subnet) + " " + shellQuote(platform.network));
+                }
+                else if (ssh(platform, "docker network inspect " + shellQuote(platform.network) + " --format '{{range .IPAM.Config}}{{.Subnet}}{{end}}'") !== platform.subnet)
+                    throw new Error("Existing data network has a different subnet.");
+                destination = await api("POST", "/servers/" + platform.serverUuid + "/destinations", { name: platform.network, network: platform.network, type: "standalone" });
+            }
+        }
+        if (destination)
+            platform.destinationUuid = destination.uuid;
+        save();
+    }
+    const needsDatabase = Object.values(manifest.environments).some(target => target.publish.includes("cms"));
+    if (needsDatabase && !platform.poolUuid) {
+        const resources = list(await api("GET", "/resources"));
+        const found = resources.find(item => item.name === "flowpress-mariadb-" + manifest.platform && item.type === "standalone-mariadb");
+        if (found) {
+            // Recover interrupted provisioning only when the saved root secret exists.
+            const secretsFile = poolSecretsPath(root, manifest.platform);
+            if (!readEnv(secretsFile).POOL_ROOT_PASSWORD)
+                throw new Error("Existing pool found but its operator secret is missing.");
+            platform.poolUuid = found.uuid;
+        }
+        else {
+            actions.push("Create shared MariaDB (2 GiB, 1 CPU, no public port)");
+            if (apply) {
+                const envs = list(await api("GET", "/projects/" + project.uuid + "/environments"));
+                const environment = envs.find(item => item.name === "shared") || await api("POST", "/projects/" + project.uuid + "/environments", { name: "shared" });
+                const secrets = poolSecrets(root, manifest.platform, { create: true });
+                const pool = await api("POST", "/databases/mariadb", {
+                    project_uuid: project.uuid, server_uuid: platform.serverUuid, destination_uuid: platform.destinationUuid,
+                    environment_uuid: environment.uuid, environment_name: "shared",
+                    name: "flowpress-mariadb-" + manifest.platform, image: "mariadb:11.4",
+                    mariadb_database: "flowpresscontrol", mariadb_user: "flowpresscontrol",
+                    mariadb_password: randomBytes(32).toString("hex"), mariadb_root_password: secrets.POOL_ROOT_PASSWORD,
+                    mariadb_conf: Buffer.from("[mariadb]\ninnodb_buffer_pool_size=512M\nmax_connections=128\n").toString("base64"),
+                    is_public: false, limits_memory: "2g", limits_cpus: "1", instant_deploy: true,
+                });
+                platform.poolUuid = pool.uuid;
+            }
+        }
+        save();
+    }
+    if (apply && needsDatabase && platform.poolUuid)
+        await waitPool(api, platform.poolUuid);
+    return { actions, platform: publicPlatform(manifest.platform, platform), applied: apply };
+}
+export async function provision(root, manifest, name, { file, apply = false, components = [] } = {}) {
+    const selected = allowedComponents(manifest, name, components);
+    if (name === "local")
+        throw new Error("Remote provisioning does not accept local.");
+    const target = targetConfig(manifest, name), projectIdentity = identity(root);
+    const platform = publicPlatform(manifest.platform, platformConfig(root, manifest, file));
+    if (!platform.destinationUuid || (selected.includes("cms") && !platform.poolUuid))
+        throw new Error("Provision the required shared platform capabilities first.");
+    const api = coolifyClient(platform.coolifyUrl, operatorEnvironment(root).COOLIFY_TOKEN);
+    const state = loadState(root, name);
+    if (state.project && state.project !== projectIdentity.slug)
+        throw new Error("Deployment state belongs to a different project.");
+    const actions = [];
+    const save = () => { if (apply)
+        saveState(root, name, state); };
+    state.platform = platform;
+    state.project = projectIdentity.slug;
+    state.environment = name;
+    state.apps ||= {};
+    async function resource(description, current, create) {
+        if (current)
+            return current;
+        actions.push(description);
+        const uuid = apply ? (await create()).uuid : undefined;
+        return uuid;
+    }
+    const projects = list(await api("GET", "/projects"));
+    state.projectUuid = await resource("Create client project", state.projectUuid || projects.find(item => item.name === projectIdentity.slug)?.uuid, () => api("POST", "/projects", { name: projectIdentity.slug, description: "FlowPress installation managed by flowpress.deploy.yaml" }));
+    save();
+    if (state.projectUuid) {
+        const envs = list(await api("GET", "/projects/" + state.projectUuid + "/environments"));
+        state.environmentUuid = await resource("Create " + name + " environment", state.environmentUuid || envs.find(item => item.name === name)?.uuid, () => api("POST", "/projects/" + state.projectUuid + "/environments", { name }));
+        save();
+    }
+    if (selected.includes("cms")) {
+        actions.push(state.database ? "Verify isolated database binding" : "Create isolated database and user in shared pool");
+        if (apply) {
+            const values = ensureSecrets(root, name, projectIdentity.slug);
+            poolSql(platform, poolSecrets(root, manifest.platform).POOL_ROOT_PASSWORD, schemaSql(values));
+            state.database = { ...state.database, name: values.DB_NAME, user: values.DB_USER };
+            save();
+            const schedules = list(await api("GET", "/databases/" + platform.poolUuid + "/backups"));
+            const found = schedules.find(item => item.uuid === state.database.backupUuid)
+                || schedules.find(item => item.databases_to_backup === values.DB_NAME && item.save_s3 && !item.dump_all);
+            state.database.backupUuid = await resource("Schedule daily offsite database backup", found?.uuid, () => api("POST", "/databases/" + platform.poolUuid + "/backups", {
+                frequency: "35 2 * * *", enabled: true, save_s3: true, s3_storage_uuid: platform.backupStorageUuid,
+                databases_to_backup: values.DB_NAME, dump_all: false,
+                database_backup_retention_amount_s3: 14, database_backup_retention_amount_locally: 2, missing_backup_notification_days: 2,
+            }));
+            save();
+        }
+    }
+    for (const component of selected) {
+        const appName = projectIdentity.slug + "-" + name + "-" + component;
+        const repository = imageRepository(platform, projectIdentity.slug, component);
+        const url = component === "cms" ? target.backendUrl : target.frontendUrl;
+        const health = component === "cms" ? "/healthz.php" : "/healthz.json";
+        const app = state.apps[component] ||= {};
+        const resources = list(await api("GET", "/resources"));
+        app.uuid = await resource("Create " + component + " application", app.uuid || resources.find(item => item.name === appName)?.uuid, () => api("POST", "/applications/dockerimage", {
+            project_uuid: state.projectUuid, server_uuid: platform.serverUuid, destination_uuid: platform.destinationUuid,
+            environment_uuid: state.environmentUuid, environment_name: name, name: appName,
+            docker_registry_image_name: repository, docker_registry_image_tag: name,
+            domains: url, is_force_https_enabled: true, ports_exposes: "8080",
+            health_check_enabled: true, health_check_path: health, health_check_port: "8080",
+            health_check_host: "127.0.0.1", health_check_interval: 30, health_check_timeout: 5, health_check_retries: 5, health_check_start_period: 30,
+            limits_memory: component === "cms" ? "1536m" : component === "web-static" ? "256m" : "512m",
+            limits_cpus: component === "cms" ? "1" : "0.5", custom_docker_run_options: "--cap-drop=ALL --init",
+            stop_grace_period: 30, docker_images_to_keep: 3, is_preview_deployments_enabled: false, instant_deploy: false,
+        }));
+        Object.assign(app, { name: appName, repository, url, health });
+        save();
+        if (!app.uuid || !apply)
+            continue;
+        const configured = await api("GET", "/applications/" + app.uuid);
+        if (configured.docker_registry_image_name !== repository || configured.fqdn !== url || configured.docker_registry_image_tag !== name) {
+            await api("PATCH", "/applications/" + app.uuid, { docker_registry_image_name: repository, docker_registry_image_tag: name, domains: url });
+        }
+        if (component === "cms") {
+            const storageData = await api("GET", "/applications/" + app.uuid + "/storages");
+            const storages = Array.isArray(storageData) ? storageData : storageData.persistent_storages || [];
+            for (const [volume, mount] of [["uploads", "/srv/cms/web/app/uploads"], ["webp", "/srv/cms/web/app/webp-express"]]) {
+                if (!storages.some(item => item.mount_path === mount))
+                    await api("POST", "/applications/" + app.uuid + "/storages", { type: "persistent", name: appName + "-" + volume, mount_path: mount });
+            }
+            const currentStorages = await api("GET", "/applications/" + app.uuid + "/storages");
+            const uploads = (Array.isArray(currentStorages) ? currentStorages : currentStorages.persistent_storages || []).find(item => item.mount_path === "/srv/cms/web/app/uploads");
+            if (uploads?.uuid)
+                await api("PUT", "/applications/" + app.uuid + "/storages/" + uploads.uuid + "/backups", {
+                    frequency: "50 2 * * *", enabled: true, save_s3: true, s3_storage_uuid: platform.backupStorageUuid,
+                    retention_amount_s3: 14, retention_amount_locally: 2, missing_backup_notification_days: 2,
+                });
+            app.uploadsStorageUuid = uploads?.uuid;
+            const tasks = list(await api("GET", "/applications/" + app.uuid + "/scheduled-tasks"));
+            if (!tasks.some(item => item.name === "wp-cron"))
+                await api("POST", "/applications/" + app.uuid + "/scheduled-tasks", { name: "wp-cron", command: "wp cron event run --due-now --quiet", frequency: "*/5 * * * *", timeout: 280, enabled: true });
+            await syncEnvironment(root, name, api);
+        }
+        else {
+            const values = resolveFrontendEnvironment(manifestEnvironment(root, name, {}), target => manifestEnvironment(root, target, {}));
+            const keys = ["APP_ENV", "SITE_URL", "BACKEND_URL", "BACKEND_GRAPHQL_URL", "FLOWPRESS_MEDIA", "FLOWPRESS_COMPOSITION_MODE", "FRONTEND_BACKEND_TARGET", "PROJECT_NAME", "PROJECT_SLUG", "ASTRO_OUTPUT_MODE"];
+            await api("PATCH", "/applications/" + app.uuid + "/envs/bulk", { data: keys.map(key => ({ key, value: String(values[key] || ""), is_runtime: true, is_buildtime: false, is_preview: false, is_literal: true })) });
+        }
+        save();
+    }
+    return { project: projectIdentity.slug, environment: name, components: selected, actions, applied: apply };
+}
+export async function syncEnvironment(root, name, api) {
+    const state = loadState(root, name);
+    const app = state.apps?.cms;
+    if (!app?.uuid)
+        throw new Error("CMS not provisioned.");
+    const values = cmsEnvironment(root, name);
+    const existing = list(await api("GET", "/applications/" + app.uuid + "/envs"));
+    const envs = Object.entries(values).map(([key, value]) => ({ key, value, is_buildtime: false, is_runtime: true, is_preview: false, is_literal: true, is_multiline: false }));
+    // Remove credentials of deactivated capabilities rather than preserving old secrets.
+    for (const item of existing)
+        if (!Object.hasOwn(values, item.key) && /^(SMTP_|ADVMO_|CMS_GITHUB_DISPATCH_TOKEN)/.test(item.key))
+            envs.push({ key: item.key, value: "", is_buildtime: false, is_runtime: true, is_preview: false, is_literal: true });
+    await api("PATCH", "/applications/" + app.uuid + "/envs/bulk", { data: envs });
+    return { keys: Object.keys(values) };
+}
+//# sourceMappingURL=provision.js.map

package/dist/ops/provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/ops/provision.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5L,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;AACnE,MAAM,UAAU,aAAa,CAAC,KAAK;IACjC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC5I,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,MAAM;IAC9B,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACnH,OAAO,gCAAgC,GAAG,IAAI,GAAG,sDAAsD;UACnG,6BAA6B,GAAG,IAAI,GAAG,uBAAuB,GAAG,MAAM,CAAC,WAAW,GAAG,yDAAyD;UAC/I,0BAA0B,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,CAAC;AACxE,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,IAAI,EAAE,UAAU;IAC9C,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,+BAA+B,IAAI,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC,CAAC;AAChI,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,EAAE;IACnE,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;QACxH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,kBAAkB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7D,aAAa,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG;IAC7C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9I,MAAM,OAAO,GAAG,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,GAAG,SAAS;UAC7D,UAAU,CAAC,sFAAsF,CAAC,CAAC;IACvG,OAAO,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC;AAClE,CAAC;AACD,KAAK,UAAU,QAAQ,CAAC,GAAG,EAAE,IAAI;IAC/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB;YAAE,OAAO;QAC9C,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,EAAE;IAClF,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAC1D,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACvE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACxL,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC;gBAAE,IAAI,QAAQ,CAAC,GAAG,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnG,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IACrD,IAAI,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC/C,IAAI,KAAK;YAAE,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC,CAAC;IAC1J,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;QAC7D,IAAI,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5H,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,sBAAsB,GAAG,QAAQ,CAAC,OAAO,GAAG,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;YACvF,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,mCAAmC,GAAG,QAAQ,CAAC,OAAO,GAAG,wBAAwB,CAAC,CAAC;gBAClH,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,oHAAoH,CAAC,CAAC;oBACrJ,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC3G,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBACpG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAC5C,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;wBACvE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,MAAM,CAAC,CAAC;oBAC1G,CAAC;oBACD,GAAG,CAAC,QAAQ,EAAE,iCAAiC,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtH,CAAC;qBAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,yBAAyB,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,sDAAsD,CAAC,KAAK,QAAQ,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBAClO,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC,UAAU,GAAG,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAClK,CAAC;QACH,CAAC;QACD,IAAI,WAAW;YAAE,QAAQ,CAAC,eAAe,GAAG,WAAW,CAAC,IAAI,CAAC;QAC7D,IAAI,EAAE,CAAC;IACT,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1G,IAAI,aAAa,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;QACnI,IAAI,KAAK,EAAE,CAAC;YACV,2EAA2E;YAC3E,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,kBAAkB;gBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACzH,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACrE,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC;gBACnF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACtJ,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE;oBACnD,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,UAAU,EAAE,gBAAgB,EAAE,QAAQ,CAAC,eAAe;oBACxG,gBAAgB,EAAE,WAAW,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ;oBAC9D,IAAI,EAAE,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc;oBACrE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,kBAAkB;oBACtE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,kBAAkB;oBACpG,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC9G,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI;iBAC9E,CAAC,CAAC;gBACH,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YAChC,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC;IACD,IAAI,KAAK,IAAI,aAAa,IAAI,QAAQ,CAAC,QAAQ;QAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,GAAG,KAAK,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,EAAE;IACjG,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC/D,IAAI,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACjK,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACjI,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,IAAI,KAAK;QAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC1B,KAAK,CAAC,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC;IACrC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;IAClB,KAAK,UAAU,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM;QAClD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IACrD,KAAK,CAAC,WAAW,GAAG,MAAM,QAAQ,CAAC,uBAAuB,EAAE,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAC9I,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC,CAAC,CAAC;IAC1I,IAAI,EAAE,CAAC;IACP,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,CAAC,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC;QACxF,KAAK,CAAC,eAAe,GAAG,MAAM,QAAQ,CAAC,SAAS,GAAG,IAAI,GAAG,cAAc,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,IAAI,EAC5I,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,GAAG,KAAK,CAAC,WAAW,GAAG,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACnF,IAAI,EAAE,CAAC;IACT,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC;QACvH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;YAC/D,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9F,KAAK,CAAC,QAAQ,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YACnF,IAAI,EAAE,CAAC;YACP,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,QAAQ,CAAC,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC;YACzF,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;mBACxE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,KAAK,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3G,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,MAAM,QAAQ,CAAC,wCAAwC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,QAAQ,CAAC,QAAQ,GAAG,UAAU,EAAE;gBAClK,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,iBAAiB;gBAClG,mBAAmB,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK;gBACpD,mCAAmC,EAAE,EAAE,EAAE,wCAAwC,EAAE,CAAC,EAAE,gCAAgC,EAAE,CAAC;aAC1H,CAAC,CAAC,CAAC;YACJ,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,SAAS,CAAC;QACpE,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACzE,MAAM,MAAM,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;QACtE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;QACvD,GAAG,CAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,GAAG,SAAS,GAAG,cAAc,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,IAAI,EAC/H,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE;YAC7C,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,UAAU,EAAE,gBAAgB,EAAE,QAAQ,CAAC,eAAe;YAC7G,gBAAgB,EAAE,KAAK,CAAC,eAAe,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO;YAC9E,0BAA0B,EAAE,UAAU,EAAE,yBAAyB,EAAE,IAAI;YACvE,OAAO,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM;YACjE,oBAAoB,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM;YAChF,iBAAiB,EAAE,WAAW,EAAE,qBAAqB,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,yBAAyB,EAAE,EAAE;YAC1I,aAAa,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC3F,WAAW,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,yBAAyB,EAAE,uBAAuB;YAClG,iBAAiB,EAAE,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,8BAA8B,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK;SAC9G,CAAC,CAAC,CAAC;QACN,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,IAAI,EAAE,CAAC;QACP,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,SAAS;QAClC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,UAAU,CAAC,0BAA0B,KAAK,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,GAAG,IAAI,UAAU,CAAC,yBAAyB,KAAK,IAAI,EAAE,CAAC;YACrI,MAAM,GAAG,CAAC,OAAO,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,0BAA0B,EAAE,UAAU,EAAE,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7I,CAAC;QACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACxB,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC;YAChF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,mBAAmB,IAAI,EAAE,CAAC;YAClG,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,0BAA0B,CAAC,EAAE,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC,EAAE,CAAC;gBACnH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC;oBAAE,MAAM,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,GAAG,GAAG,GAAG,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/L,CAAC;YACD,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC;YACpF,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,0BAA0B,CAAC,CAAC;YAC5K,IAAI,OAAO,EAAE,IAAI;gBAAE,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,UAAU,EAAE;oBAC1G,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,iBAAiB;oBAClG,mBAAmB,EAAE,EAAE,EAAE,wBAAwB,EAAE,CAAC,EAAE,gCAAgC,EAAE,CAAC;iBAC1F,CAAC,CAAC;YACH,GAAG,CAAC,kBAAkB,GAAG,OAAO,EAAE,IAAI,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC;YACvF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;gBAAE,MAAM,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,kBAAkB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,qCAAqC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClP,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,0BAA0B,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAChI,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,cAAc,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;YAC5M,MAAM,GAAG,CAAC,OAAO,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACrN,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC7G,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG;IACnD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;IAC5B,IAAI,CAAC,GAAG,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7K,qFAAqF;IACrF,KAAK,MAAM,IAAI,IAAI,QAAQ;QAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACrP,MAAM,GAAG,CAAC,OAAO,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AACvC,CAAC"}

package/dist/ops/registry.d.ts

@@ -0,0 +1,14 @@
+export function existingDigest(image: any, credentials: any, fetchImpl?: typeof fetch): Promise<string | null>;
+export function runtimeMetadata(image: any, credentials: any, fetchImpl?: typeof fetch): Promise<{
+    digest: string;
+    platforms: {
+        platform: string;
+        labels: any;
+    }[];
+} | null>;
+export function imageMetadata(image: any, credentials: any, fetchImpl?: typeof fetch): Promise<{
+    digest: string;
+    sha: any;
+    buildId: any;
+} | null>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/ops/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/ops/registry.js"],"names":[],"mappings":"AA+CA,+GAGC;AACD;;;;;;UAiBC;AACD;;;;UAkBC"}

package/dist/ops/registry.js

@@ -0,0 +1,112 @@
+import { createHash } from 'node:crypto';
+function registry(image, credentials, fetchImpl) {
+    const slash = image.indexOf('/'), colon = image.lastIndexOf(':');
+    if (slash < 1 || colon < slash)
+        throw new Error('Expected a tagged registry image.');
+    const origin = 'https://' + image.slice(0, slash), repository = image.slice(slash + 1, colon), tag = image.slice(colon + 1);
+    let token;
+    async function read(url, options) {
+        for (let attempt = 0;; attempt++) {
+            try {
+                const response = await fetchImpl(url, options());
+                const body = await response.text();
+                if ([502, 503, 504].includes(response.status) && attempt < 2) {
+                    await new Promise(resolve => setTimeout(resolve, 200 * (attempt + 1)));
+                    continue;
+                }
+                return { response, body };
+            }
+            catch (error) {
+                if (attempt >= 2 || !(error instanceof TypeError || ["TimeoutError", "AbortError"].includes(error.name)))
+                    throw error;
+                await new Promise(resolve => setTimeout(resolve, 200 * (attempt + 1)));
+            }
+        }
+    }
+    async function request(path) {
+        const headers = { accept: 'application/vnd.oci.image.index.v1+json, application/vnd.oci.image.manifest.v1+json, application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.docker.distribution.manifest.v2+json' };
+        if (token)
+            headers.authorization = 'Bearer ' + token;
+        const options = () => ({ headers, redirect: 'error', signal: AbortSignal.timeout(30000) });
+        const url = origin + '/v2/' + repository + path;
+        let { response, body } = await read(url, options);
+        if (response.status === 401 && !token) {
+            const challenge = response.headers.get('www-authenticate') || '';
+            const realm = challenge.match(/realm="([^"]+)"/i)?.[1], service = challenge.match(/service="([^"]+)"/i)?.[1];
+            if (!realm || new URL(realm).origin !== origin)
+                throw new Error('Unexpected registry authentication realm.');
+            const tokenUrl = new URL(realm);
+            tokenUrl.searchParams.set('scope', 'repository:' + repository + ':pull');
+            if (service)
+                tokenUrl.searchParams.set('service', service);
+            const { response: auth, body: authBody } = await read(tokenUrl, () => ({ headers: { authorization: 'Basic ' + Buffer.from(credentials.REGISTRY_USERNAME + ':' + credentials.REGISTRY_PASSWORD).toString('base64') }, redirect: 'error', signal: AbortSignal.timeout(30000) }));
+            if (!auth.ok)
+                throw new Error('Registry token request refused (HTTP ' + auth.status + ').');
+            const data = JSON.parse(authBody);
+            token = data.token || data.access_token;
+            headers.authorization = 'Bearer ' + token;
+            ({ response, body } = await read(url, options));
+        }
+        if (response.status === 404)
+            return null;
+        if (!response.ok)
+            throw new Error('Cannot verify immutable registry tag (HTTP ' + response.status + ').');
+        const digest = 'sha256:' + createHash('sha256').update(body).digest('hex');
+        if (response.headers.get('docker-content-digest') && response.headers.get('docker-content-digest') !== digest)
+            throw new Error('Registry manifest digest mismatch.');
+        return { body, digest };
+    }
+    return { tag, request };
+}
+// A genuine 404 is the only condition that permits a new immutable tag.
+export async function existingDigest(image, credentials, fetchImpl = fetch) {
+    const client = registry(image, credentials, fetchImpl);
+    return (await client.request('/manifests/' + encodeURIComponent(client.tag)))?.digest || null;
+}
+export async function runtimeMetadata(image, credentials, fetchImpl = fetch) {
+    const client = registry(image, credentials, fetchImpl);
+    const first = await client.request('/manifests/' + encodeURIComponent(client.tag));
+    if (!first)
+        return null;
+    const index = JSON.parse(first.body), platforms = [];
+    const descriptors = index.manifests ? index.manifests.filter(item => item.platform?.os === 'linux' && ['amd64', 'arm64'].includes(item.platform?.architecture)) : [{ digest: first.digest }];
+    for (const descriptor of descriptors) {
+        const concrete = descriptor.digest === first.digest ? first : await client.request('/manifests/' + encodeURIComponent(descriptor.digest));
+        if (!concrete || concrete.digest !== descriptor.digest)
+            throw new Error('Runtime platform digest mismatch.');
+        const manifest = JSON.parse(concrete.body);
+        const config = manifest.config?.digest && await client.request('/blobs/' + encodeURIComponent(manifest.config.digest));
+        if (!config || config.digest !== manifest.config.digest)
+            throw new Error('Runtime configuration digest mismatch.');
+        const value = JSON.parse(config.body);
+        if (descriptor.platform && (descriptor.platform.os !== value.os || descriptor.platform.architecture !== value.architecture))
+            throw new Error('Runtime platform configuration mismatch.');
+        platforms.push({ platform: value.os + '/' + value.architecture, labels: value.config?.Labels || {} });
+    }
+    return { digest: first.digest, platforms };
+}
+export async function imageMetadata(image, credentials, fetchImpl = fetch) {
+    const client = registry(image, credentials, fetchImpl);
+    const first = await client.request('/manifests/' + encodeURIComponent(client.tag));
+    if (!first)
+        return null;
+    let manifest = JSON.parse(first.body);
+    if (manifest.manifests) {
+        const platform = manifest.manifests.find(item => item.platform?.os === 'linux' && item.platform?.architecture === 'amd64');
+        if (!platform)
+            throw new Error('Release has no linux/amd64 image.');
+        const concrete = await client.request('/manifests/' + encodeURIComponent(platform.digest));
+        if (!concrete || concrete.digest !== platform.digest)
+            throw new Error('Image platform digest mismatch.');
+        manifest = JSON.parse(concrete.body);
+    }
+    const config = manifest.config?.digest && await client.request('/blobs/' + encodeURIComponent(manifest.config.digest));
+    if (!config || config.digest !== manifest.config.digest)
+        throw new Error('Image configuration digest mismatch.');
+    const labels = JSON.parse(config.body).config?.Labels || {};
+    const sha = labels['org.opencontainers.image.revision'];
+    if (!/^[a-f0-9]{40}$/.test(sha || ''))
+        throw new Error('Image has no valid release SHA label.');
+    return { digest: first.digest, sha, buildId: labels['app.flowpress.build-id'] };
+}
+//# sourceMappingURL=registry.js.map

package/dist/ops/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/ops/registry.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,SAAS,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5H,IAAI,KAAK,CAAC;IACV,KAAK,UAAU,IAAI,CAAC,GAAG,EAAE,OAAO;QAC9B,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBACjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACnJ,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACtH,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,UAAU,OAAO,CAAC,IAAI;QACzB,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,sMAAsM,EAAE,CAAC;QACnO,IAAI,KAAK;YAAE,OAAO,CAAC,aAAa,GAAG,SAAS,GAAG,KAAK,CAAC;QACrD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3F,MAAM,GAAG,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;QAChD,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7G,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC7G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAChC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,GAAG,UAAU,GAAG,OAAO,CAAC,CAAC;YACzE,IAAI,OAAO;gBAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3D,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,iBAAiB,GAAG,GAAG,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/Q,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;YAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;YAC3E,OAAO,CAAC,aAAa,GAAG,SAAS,GAAG,KAAK,CAAC;YAC1C,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACrK,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AACD,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,GAAG,KAAK;IACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACvD,OAAO,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;AAChG,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,GAAG,KAAK;IACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC;IACrD,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,OAAO,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7L,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,GAAG,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1I,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC7G,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACvH,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACnH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,UAAU,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACzL,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,GAAG,GAAG,GAAG,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAC7C,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,GAAG,KAAK;IACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,YAAY,KAAK,OAAO,CAAC,CAAC;QAC3H,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACzG,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACvH,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,mCAAmC,CAAC,CAAC;IACxD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAChG,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,wBAAwB,CAAC,EAAE,CAAC;AAClF,CAAC"}

package/dist/ops/release.d.ts

@@ -0,0 +1,26 @@
+export function changedComponents(paths: any, available: any): any;
+export function editorialCommit(root: any, manifest: any, payload: any): Promise<{
+    request: {
+        target: any;
+        batchId: any;
+        mode: any;
+        paths: string[];
+        deletedPaths: string[];
+    };
+    sha: any;
+}>;
+export function release(root: any, manifest: any, name: any, { component, sha, buildId, editorial }?: {
+    editorial?: boolean | undefined;
+}): Promise<{
+    environment: any;
+    components: any;
+    results: {
+        component: any;
+        environment: any;
+        release: any;
+        digest: any;
+        url: any;
+        rollback: boolean;
+    }[];
+}>;
+//# sourceMappingURL=release.d.ts.map

package/dist/ops/release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../../src/ops/release.js"],"names":[],"mappings":"AAOA,mEAQC;AACD;;;;;;;;;GASC;AACD;;;;;;;;;;;;;GAoCC"}

package/dist/ops/release.js

@@ -0,0 +1,79 @@
+import { readFileSync } from "node:fs";
+import { allowedComponents, loadState } from "./config.js";
+import { build } from "./build.js";
+import { deploy, deployedRelease } from "./deploy.js";
+import { capture } from "./process.js";
+import { acknowledgeBatch, validateBuildRequest } from "./editorial.js";
+export function changedComponents(paths, available) {
+    if (!paths.length)
+        return [];
+    const relevant = paths.filter(path => !/^(docs\/|README|CHANGELOG)|\.md$/.test(path));
+    if (!relevant.length)
+        return [];
+    const cms = relevant.some(path => /^apps\/cms\//.test(path));
+    const web = relevant.some(path => /^apps\/web\//.test(path));
+    const shared = relevant.some(path => !/^apps\/(cms|web)\//.test(path));
+    return available.filter(component => shared || (component === "cms" ? cms : web));
+}
+export async function editorialCommit(root, manifest, payload) {
+    const request = validateBuildRequest(payload);
+    allowedComponents(manifest, request.target, ["web-static"]);
+    const app = loadState(root, request.target).apps?.["web-static"];
+    if (!app?.url)
+        throw new Error("No deployed static frontend for this editorial target.");
+    const res = await fetch(app.url + app.health + "?editorial=" + Date.now(), { redirect: "error", signal: AbortSignal.timeout(10000) });
+    const data = await res.json();
+    if (!res.ok || data.status !== "ok" || !/^[a-f0-9]{40}$/.test(data.release || "") || data.backendTarget !== request.target)
+        throw new Error("Editorial target is not a healthy static frontend using this backend.");
+    return { request, sha: data.release };
+}
+export async function release(root, manifest, name, { component, sha, buildId, editorial = false } = {}) {
+    let selected = allowedComponents(manifest, name, component ? [component] : []);
+    const revision = sha || capture("git", ["rev-parse", "HEAD"], { cwd: root });
+    let request;
+    if (editorial) {
+        const event = JSON.parse(readFileSync(process.env.GITHUB_EVENT_PATH, "utf8"));
+        const live = await editorialCommit(root, manifest, event.client_payload);
+        if (live.request.target !== name || live.sha !== revision)
+            throw new Error("Editorial build must check out the exact deployed commit.");
+        request = live.request;
+        selected = ["web-static"];
+    }
+    else if (process.env.GITHUB_EVENT_NAME === "push" && process.env.GITHUB_EVENT_PATH) {
+        const event = JSON.parse(readFileSync(process.env.GITHUB_EVENT_PATH, "utf8"));
+        if (/^[a-f0-9]{40}$/.test(event.before || "") && !/^0+$/.test(event.before)) {
+            try {
+                selected = changedComponents(capture("git", ["diff", "--name-only", event.before, revision], { cwd: root }).split("\n").filter(Boolean), selected);
+            }
+            catch { /* shallow checkout: safely build all allowed components */ }
+        }
+    }
+    const results = [];
+    try {
+        for (const item of selected) {
+            if (name === "production" && item === "cms") {
+                const verified = await deployedRelease(root, "staging", "cms");
+                if (!verified || verified.sha !== revision)
+                    throw new Error("Production CMS must promote the staging image for this SHA.");
+                results.push(await deploy(root, manifest, name, item, { release: { ...verified, environment: "production" } }));
+            }
+            else {
+                await build(root, manifest, name, item, { sha: revision, buildId, push: true });
+                results.push(await deploy(root, manifest, name, item));
+            }
+        }
+        if (request)
+            await acknowledgeBatch({ request, backend: manifest.environments[name].backendUrl, token: process.env.CMS_BUILD_CALLBACK_TOKEN, status: "success" });
+    }
+    catch (error) {
+        if (request) {
+            try {
+                await acknowledgeBatch({ request, backend: manifest.environments[name].backendUrl, token: process.env.CMS_BUILD_CALLBACK_TOKEN, status: "failure" });
+            }
+            catch { /* original failure remains authoritative; batch is retained */ }
+        }
+        throw error;
+    }
+    return { environment: name, components: selected, results };
+}
+//# sourceMappingURL=release.js.map

package/dist/ops/release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release.js","sourceRoot":"","sources":["../../src/ops/release.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAExE,MAAM,UAAU,iBAAiB,CAAC,KAAK,EAAE,SAAS;IAChD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACpF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO;IAC3D,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9C,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;IACjE,IAAI,CAAC,GAAG,EAAE,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtI,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,aAAa,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACrN,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACxC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,EAAE;IACrG,IAAI,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC;IACZ,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACxI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,QAAQ,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACrF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9E,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC;gBAAC,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;QACnO,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC/D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;gBAC3H,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;YAClH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChF,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpK,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBAAC,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,+DAA+D,CAAC,CAAC;QACzO,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC"}

package/dist/ops/runtimes.d.ts

@@ -0,0 +1,16 @@
+export function recipeHash(kind: any, directory?: string): string;
+export function runtimeCatalog(directory?: string): any;
+export function runtimeImages(catalog?: any): {
+    [k: string]: string;
+};
+export function assertRuntimeMetadata(metadata: any, kind: any, recipe: any, expectedPlatforms: any, digest: any): any;
+export function ensureLocalImages(images: any, docker?: {
+    capture: typeof capture;
+    run: typeof run;
+}): void;
+export const runtimeRoot: string;
+export const runtimeKinds: string[];
+export const managedLabel: "io.flowpress.managed";
+import { capture } from "./process.js";
+import { run } from "./process.js";
+//# sourceMappingURL=runtimes.d.ts.map

package/dist/ops/runtimes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimes.d.ts","sourceRoot":"","sources":["../../src/ops/runtimes.js"],"names":[],"mappings":"AASA,kEAaC;AACD,wDASC;AACD;;EAEC;AACD,uHAQC;AACD;;;SAQC;AA/CD,iCAA8F;AAC9F,oCAA2C;AAC3C,2BAA4B,sBAAsB,CAAC;wBAJtB,cAAc;oBAAd,cAAc"}