@styleflow.app/flowpress-deploy 1.0.0-beta.3 → 1.0.0-beta.4

package/dist/ops/provision.js

@@ -0,0 +1,251 @@
+import { randomBytes } from "node:crypto";
+import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
+import { allowedComponents, ensureSecrets, identity, imageRepository, loadState, operatorEnvironment, platformConfig, publicPlatform, readEnv, saveState, targetConfig } from "./config.js";
+import { cmsEnvironment } from "./environment.js";
+import { coolifyClient } from "./coolify.js";
+import { shellQuote, ssh, sleep } from "./process.js";
+const list = data => Array.isArray(data) ? data : data?.data || [];
+export function sqlIdentifier(value) {
+    if (!/^[a-z][a-z0-9]{1,63}$/.test(value || ""))
+        throw new Error("SQL identifiers must be lowercase alphanumeric; wildcards are forbidden.");
+    return value;
+}
+export function schemaSql(values) {
+    const name = sqlIdentifier(values.DB_NAME), user = sqlIdentifier(values.DB_USER);
+    if (!/^[a-f0-9]{64}$/.test(values.DB_PASSWORD))
+        throw new Error("Expected a generated 256-bit database password.");
+    return "CREATE DATABASE IF NOT EXISTS " + name + " CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;\n"
+        + "CREATE USER IF NOT EXISTS '" + user + "'@'%' IDENTIFIED BY '" + values.DB_PASSWORD + "' WITH MAX_USER_CONNECTIONS 12 MAX_STATEMENT_TIME 60;\n"
+        + "GRANT ALL PRIVILEGES ON " + name + ".* TO '" + user + "'@'%';\n";
+}
+export function poolSecrets(root, platformId) {
+    const file = process.env.FLOWPRESS_PLATFORM_SECRETS_FILE || join(root, ".secrets", "platform-" + platformId + ".env");
+    const current = readEnv(file);
+    if (!current.POOL_ROOT_PASSWORD) {
+        mkdirSync(dirname(file), { recursive: true, mode: 0o700 });
+        current.POOL_ROOT_PASSWORD = randomBytes(32).toString("hex");
+        writeFileSync(file, "POOL_ROOT_PASSWORD=" + current.POOL_ROOT_PASSWORD + "\n", { mode: 0o600 });
+    }
+    return current;
+}
+export function poolSql(platform, password, sql) {
+    if (!/^[a-z0-9]+$/.test(platform.poolUuid || "") || !password || /[\r\n]/.test(password))
+        throw new Error("Invalid shared pool credentials.");
+    const command = "docker exec -i " + platform.poolUuid + " sh -c "
+        + shellQuote('read -r MYSQL_PWD; export MYSQL_PWD; exec mariadb -uroot --batch --skip-column-names');
+    return ssh(platform, command, { input: password + "\n" + sql });
+}
+async function waitPool(api, uuid) {
+    for (let attempt = 0; attempt < 60; attempt++) {
+        const pool = await api("GET", "/databases/" + uuid);
+        if (pool.status === "running:healthy")
+            return;
+        await sleep(3000);
+    }
+    throw new Error("Shared MariaDB did not start.");
+}
+export async function provisionPlatform(root, manifest, { file, apply = false } = {}) {
+    const path = file || process.env.FLOWPRESS_PLATFORMS_FILE;
+    if (!path)
+        throw new Error("A platform catalog file is required.");
+    const catalog = parseYaml(readFileSync(path, "utf8"));
+    const platform = catalog.platforms?.[manifest.platform];
+    if (!platform)
+        throw new Error("Platform not configured.");
+    const operator = operatorEnvironment(root);
+    const api = coolifyClient(platform.coolifyUrl, operator.COOLIFY_TOKEN);
+    if (!/^[a-zA-Z0-9_-]+$/.test(platform.network || "") || !/^10\.\d+\.\d+\.0\/24$/.test(platform.subnet || ""))
+        throw new Error("Explicit private network name and /24 subnet required.");
+    const save = () => {
+        if (apply)
+            writeFileSync(path, stringifyYaml(catalog));
+    };
+    const actions = [];
+    const projects = list(await api("GET", "/projects"));
+    let project = projects.find(item => item.name === "flowpress-platform");
+    if (!project) {
+        actions.push("Create shared platform project");
+        if (apply)
+            project = await api("POST", "/projects", { name: "flowpress-platform", description: "Shared FlowPress infrastructure. No client content." });
+    }
+    if (!platform.destinationUuid) {
+        const destinations = list(await api("GET", "/destinations"));
+        let destination = destinations.find(item => item.network === platform.network && item.server?.uuid === platform.serverUuid);
+        if (!destination) {
+            actions.push("Create data network " + platform.network + " (" + platform.subnet + ")");
+            if (apply) {
+                const existing = ssh(platform, "docker network ls --filter name=^" + platform.network + "$ --format '{{.Name}}'");
+                if (!existing) {
+                    const networks = ssh(platform, "docker network ls -q | xargs docker network inspect --format '{{range .IPAM.Config}}{{.Subnet}}{{\"\\n\"}}{{end}}'");
+                    const number = ip => ip.split(".").reduce((result, part) => ((result << 8) >>> 0) + Number(part), 0) >>> 0;
+                    const desired = number(platform.subnet.split("/")[0]);
+                    for (const subnet of networks.split(/\s+/).filter(value => /^\d+\.\d+\.\d+\.\d+\/\d+$/.test(value))) {
+                        const [address, prefix] = subnet.split("/");
+                        const mask = (0xffffffff << (32 - Math.min(24, Number(prefix)))) >>> 0;
+                        if ((number(address) & mask) === (desired & mask))
+                            throw new Error("Network subnet overlaps " + subnet);
+                    }
+                    ssh(platform, "docker network create --subnet " + shellQuote(platform.subnet) + " " + shellQuote(platform.network));
+                }
+                else if (ssh(platform, "docker network inspect " + shellQuote(platform.network) + " --format '{{range .IPAM.Config}}{{.Subnet}}{{end}}'") !== platform.subnet)
+                    throw new Error("Existing data network has a different subnet.");
+                destination = await api("POST", "/servers/" + platform.serverUuid + "/destinations", { name: platform.network, network: platform.network, type: "standalone" });
+            }
+        }
+        if (destination)
+            platform.destinationUuid = destination.uuid;
+        save();
+    }
+    if (!platform.poolUuid) {
+        const resources = list(await api("GET", "/resources"));
+        const found = resources.find(item => item.name === "flowpress-mariadb-" + manifest.platform && item.type === "standalone-mariadb");
+        if (found) {
+            // Recover interrupted provisioning only when the saved root secret exists.
+            const secretsFile = process.env.FLOWPRESS_PLATFORM_SECRETS_FILE || join(root, ".secrets", "platform-" + manifest.platform + ".env");
+            if (!readEnv(secretsFile).POOL_ROOT_PASSWORD)
+                throw new Error("Existing pool found but its operator secret is missing.");
+            platform.poolUuid = found.uuid;
+        }
+        else {
+            actions.push("Create shared MariaDB (2 GiB, 1 CPU, no public port)");
+            if (apply) {
+                const envs = list(await api("GET", "/projects/" + project.uuid + "/environments"));
+                const environment = envs.find(item => item.name === "shared") || await api("POST", "/projects/" + project.uuid + "/environments", { name: "shared" });
+                const secrets = poolSecrets(root, manifest.platform);
+                const pool = await api("POST", "/databases/mariadb", {
+                    project_uuid: project.uuid, server_uuid: platform.serverUuid, destination_uuid: platform.destinationUuid,
+                    environment_uuid: environment.uuid, environment_name: "shared",
+                    name: "flowpress-mariadb-" + manifest.platform, image: "mariadb:11.4",
+                    mariadb_database: "flowpresscontrol", mariadb_user: "flowpresscontrol",
+                    mariadb_password: randomBytes(32).toString("hex"), mariadb_root_password: secrets.POOL_ROOT_PASSWORD,
+                    mariadb_conf: "[mariadb]\ninnodb_buffer_pool_size=512M\nmax_connections=128\n",
+                    is_public: false, limits_memory: "2g", limits_cpus: "1", instant_deploy: true,
+                });
+                platform.poolUuid = pool.uuid;
+            }
+        }
+        save();
+    }
+    if (apply && platform.poolUuid)
+        await waitPool(api, platform.poolUuid);
+    return { actions, platform: publicPlatform(manifest.platform, platform), applied: apply };
+}
+export async function provision(root, manifest, name, { file, apply = false, components = [] } = {}) {
+    const selected = allowedComponents(manifest, name, components);
+    if (name === "local")
+        throw new Error("Remote provisioning does not accept local.");
+    const target = targetConfig(manifest, name), projectIdentity = identity(root);
+    const platform = publicPlatform(manifest.platform, platformConfig(root, manifest, file));
+    if (!platform.poolUuid || !platform.destinationUuid)
+        throw new Error("Provision the shared platform first.");
+    const api = coolifyClient(platform.coolifyUrl, operatorEnvironment(root).COOLIFY_TOKEN);
+    const state = loadState(root, name);
+    if (state.project && state.project !== projectIdentity.slug)
+        throw new Error("Deployment state belongs to a different project.");
+    const actions = [];
+    const save = () => { if (apply)
+        saveState(root, name, state); };
+    state.platform = platform;
+    state.project = projectIdentity.slug;
+    state.environment = name;
+    state.apps ||= {};
+    async function resource(description, current, create) {
+        if (current)
+            return current;
+        actions.push(description);
+        const uuid = apply ? (await create()).uuid : undefined;
+        return uuid;
+    }
+    const projects = list(await api("GET", "/projects"));
+    state.projectUuid = await resource("Create client project", state.projectUuid || projects.find(item => item.name === projectIdentity.slug)?.uuid, () => api("POST", "/projects", { name: projectIdentity.slug, description: "FlowPress installation managed by flowpress.deploy.yaml" }));
+    save();
+    if (state.projectUuid) {
+        const envs = list(await api("GET", "/projects/" + state.projectUuid + "/environments"));
+        state.environmentUuid = await resource("Create " + name + " environment", state.environmentUuid || envs.find(item => item.name === name)?.uuid, () => api("POST", "/projects/" + state.projectUuid + "/environments", { name }));
+        save();
+    }
+    if (selected.includes("cms")) {
+        actions.push(state.database ? "Verify isolated database binding" : "Create isolated database and user in shared pool");
+        if (apply) {
+            const values = ensureSecrets(root, name, projectIdentity.slug);
+            poolSql(platform, poolSecrets(root, manifest.platform).POOL_ROOT_PASSWORD, schemaSql(values));
+            state.database = { name: values.DB_NAME, user: values.DB_USER };
+            save();
+            const schedules = list(await api("GET", "/databases/" + platform.poolUuid + "/backups"));
+            const found = schedules.find(item => item.databases_to_backup === values.DB_NAME && item.s3_storage_uuid === platform.backupStorageUuid);
+            state.database.backupUuid = await resource("Schedule daily offsite database backup", found?.uuid, () => api("POST", "/databases/" + platform.poolUuid + "/backups", {
+                frequency: "35 2 * * *", enabled: true, save_s3: true, s3_storage_uuid: platform.backupStorageUuid,
+                databases_to_backup: values.DB_NAME, dump_all: false,
+                database_backup_retention_amount_s3: 14, database_backup_retention_amount_locally: 2, missing_backup_notification_days: 2,
+            }));
+            save();
+        }
+    }
+    for (const component of selected) {
+        const appName = projectIdentity.slug + "-" + name + "-" + component;
+        const repository = imageRepository(platform, projectIdentity.slug, component);
+        const url = component === "cms" ? target.backendUrl : target.frontendUrl;
+        const health = component === "cms" ? "/healthz.php" : "/healthz.json";
+        const app = state.apps[component] ||= {};
+        const resources = list(await api("GET", "/resources"));
+        app.uuid = await resource("Create " + component + " application", app.uuid || resources.find(item => item.name === appName)?.uuid, () => api("POST", "/applications/dockerimage", {
+            project_uuid: state.projectUuid, server_uuid: platform.serverUuid, destination_uuid: platform.destinationUuid,
+            environment_uuid: state.environmentUuid, environment_name: name, name: appName,
+            docker_registry_image_name: repository, docker_registry_image_tag: "unreleased",
+            domains: url, is_force_https_enabled: true, ports_exposes: "8080",
+            health_check_enabled: true, health_check_path: health, health_check_port: "8080",
+            health_check_host: "127.0.0.1", health_check_interval: 30, health_check_timeout: 5, health_check_retries: 5, health_check_start_period: 30,
+            limits_memory: component === "cms" ? "1536m" : component === "web-static" ? "256m" : "512m",
+            limits_cpus: component === "cms" ? "1" : "0.5", custom_docker_run_options: "--cap-drop=ALL --init",
+            stop_grace_period: 30, docker_images_to_keep: 3, is_preview_deployments_enabled: false, instant_deploy: false,
+        }));
+        Object.assign(app, { name: appName, repository, url, health });
+        save();
+        if (!app.uuid || !apply)
+            continue;
+        const configured = await api("GET", "/applications/" + app.uuid);
+        if (configured.docker_registry_image_name !== repository || configured.fqdn !== url) {
+            await api("PATCH", "/applications/" + app.uuid, { docker_registry_image_name: repository, domains: url });
+        }
+        if (component === "cms") {
+            const storageData = await api("GET", "/applications/" + app.uuid + "/storages");
+            const storages = Array.isArray(storageData) ? storageData : storageData.persistent_storages || [];
+            for (const [volume, mount] of [["uploads", "/srv/cms/web/app/uploads"], ["webp", "/srv/cms/web/app/webp-express"]]) {
+                if (!storages.some(item => item.mount_path === mount))
+                    await api("POST", "/applications/" + app.uuid + "/storages", { type: "persistent", name: appName + "-" + volume, mount_path: mount });
+            }
+            const currentStorages = await api("GET", "/applications/" + app.uuid + "/storages");
+            const uploads = (Array.isArray(currentStorages) ? currentStorages : currentStorages.persistent_storages || []).find(item => item.mount_path === "/srv/cms/web/app/uploads");
+            if (uploads?.uuid)
+                await api("PUT", "/applications/" + app.uuid + "/storages/" + uploads.uuid + "/backups", {
+                    frequency: "50 2 * * *", enabled: true, save_s3: true, s3_storage_uuid: platform.backupStorageUuid,
+                    retention_amount_s3: 14, retention_amount_locally: 2, missing_backup_notification_days: 2,
+                });
+            app.uploadsStorageUuid = uploads?.uuid;
+            const tasks = list(await api("GET", "/applications/" + app.uuid + "/scheduled-tasks"));
+            if (!tasks.some(item => item.name === "wp-cron"))
+                await api("POST", "/applications/" + app.uuid + "/scheduled-tasks", { name: "wp-cron", command: "wp cron event run --due-now --quiet", frequency: "*/5 * * * *", timeout: 280, enabled: true });
+            await syncEnvironment(root, name, api);
+        }
+        save();
+    }
+    return { project: projectIdentity.slug, environment: name, components: selected, actions, applied: apply };
+}
+export async function syncEnvironment(root, name, api) {
+    const state = loadState(root, name);
+    const app = state.apps?.cms;
+    if (!app?.uuid)
+        throw new Error("CMS not provisioned.");
+    const values = cmsEnvironment(root, name);
+    const existing = list(await api("GET", "/applications/" + app.uuid + "/envs"));
+    const envs = Object.entries(values).map(([key, value]) => ({ key, value, is_buildtime: false, is_runtime: true, is_preview: false, is_literal: true, is_multiline: false }));
+    // Remove credentials of deactivated capabilities rather than preserving old secrets.
+    for (const item of existing)
+        if (!Object.hasOwn(values, item.key) && /^(SMTP_|ADVMO_|CMS_GITHUB_DISPATCH_TOKEN)/.test(item.key))
+            envs.push({ key: item.key, value: "", is_buildtime: false, is_runtime: true, is_preview: false, is_literal: true });
+    await api("PATCH", "/applications/" + app.uuid + "/envs/bulk", { data: envs });
+    return { keys: Object.keys(values) };
+}
+//# sourceMappingURL=provision.js.map

package/dist/ops/provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/ops/provision.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5L,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;AACnE,MAAM,UAAU,aAAa,CAAC,KAAK;IACjC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC5I,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,MAAM;IAC9B,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACnH,OAAO,gCAAgC,GAAG,IAAI,GAAG,sDAAsD;UACnG,6BAA6B,GAAG,IAAI,GAAG,uBAAuB,GAAG,MAAM,CAAC,WAAW,GAAG,yDAAyD;UAC/I,0BAA0B,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,CAAC;AACxE,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,IAAI,EAAE,UAAU;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC,CAAC;IACtH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAChC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,kBAAkB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7D,aAAa,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG;IAC7C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9I,MAAM,OAAO,GAAG,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,GAAG,SAAS;UAC7D,UAAU,CAAC,sFAAsF,CAAC,CAAC;IACvG,OAAO,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC;AAClE,CAAC;AACD,KAAK,UAAU,QAAQ,CAAC,GAAG,EAAE,IAAI;IAC/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB;YAAE,OAAO;QAC9C,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,EAAE;IAClF,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAC1D,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACvE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACxL,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,KAAK;YAAE,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IACrD,IAAI,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC/C,IAAI,KAAK;YAAE,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC,CAAC;IAC1J,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;QAC7D,IAAI,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5H,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,sBAAsB,GAAG,QAAQ,CAAC,OAAO,GAAG,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;YACvF,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,mCAAmC,GAAG,QAAQ,CAAC,OAAO,GAAG,wBAAwB,CAAC,CAAC;gBAClH,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,oHAAoH,CAAC,CAAC;oBACrJ,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC3G,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBACpG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAC5C,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;wBACvE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,MAAM,CAAC,CAAC;oBAC1G,CAAC;oBACD,GAAG,CAAC,QAAQ,EAAE,iCAAiC,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtH,CAAC;qBAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,yBAAyB,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,sDAAsD,CAAC,KAAK,QAAQ,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBAClO,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC,UAAU,GAAG,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAClK,CAAC;QACH,CAAC;QACD,IAAI,WAAW;YAAE,QAAQ,CAAC,eAAe,GAAG,WAAW,CAAC,IAAI,CAAC;QAC7D,IAAI,EAAE,CAAC;IACT,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;QACnI,IAAI,KAAK,EAAE,CAAC;YACV,2EAA2E;YAC3E,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,GAAG,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC;YACpI,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,kBAAkB;gBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACzH,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACrE,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC;gBACnF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACtJ,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACrD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE;oBACnD,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,UAAU,EAAE,gBAAgB,EAAE,QAAQ,CAAC,eAAe;oBACxG,gBAAgB,EAAE,WAAW,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ;oBAC9D,IAAI,EAAE,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc;oBACrE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,kBAAkB;oBACtE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,kBAAkB;oBACpG,YAAY,EAAE,gEAAgE;oBAC9E,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI;iBAC9E,CAAC,CAAC;gBACH,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YAChC,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC;IACD,IAAI,KAAK,IAAI,QAAQ,CAAC,QAAQ;QAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,GAAG,KAAK,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,EAAE;IACjG,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC/D,IAAI,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC7G,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACjI,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,IAAI,KAAK;QAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC1B,KAAK,CAAC,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC;IACrC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;IAClB,KAAK,UAAU,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM;QAClD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IACrD,KAAK,CAAC,WAAW,GAAG,MAAM,QAAQ,CAAC,uBAAuB,EAAE,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAC9I,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC,CAAC,CAAC;IAC1I,IAAI,EAAE,CAAC;IACP,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,CAAC,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC;QACxF,KAAK,CAAC,eAAe,GAAG,MAAM,QAAQ,CAAC,SAAS,GAAG,IAAI,GAAG,cAAc,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,IAAI,EAC5I,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,GAAG,KAAK,CAAC,WAAW,GAAG,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACnF,IAAI,EAAE,CAAC;IACT,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC;QACvH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;YAC/D,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9F,KAAK,CAAC,QAAQ,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YAChE,IAAI,EAAE,CAAC;YACP,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,QAAQ,CAAC,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC;YACzF,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,KAAK,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACzI,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,MAAM,QAAQ,CAAC,wCAAwC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,QAAQ,CAAC,QAAQ,GAAG,UAAU,EAAE;gBAClK,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,iBAAiB;gBAClG,mBAAmB,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK;gBACpD,mCAAmC,EAAE,EAAE,EAAE,wCAAwC,EAAE,CAAC,EAAE,gCAAgC,EAAE,CAAC;aAC1H,CAAC,CAAC,CAAC;YACJ,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,SAAS,CAAC;QACpE,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACzE,MAAM,MAAM,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;QACtE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;QACvD,GAAG,CAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,GAAG,SAAS,GAAG,cAAc,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,IAAI,EAC/H,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE;YAC7C,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,UAAU,EAAE,gBAAgB,EAAE,QAAQ,CAAC,eAAe;YAC7G,gBAAgB,EAAE,KAAK,CAAC,eAAe,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO;YAC9E,0BAA0B,EAAE,UAAU,EAAE,yBAAyB,EAAE,YAAY;YAC/E,OAAO,EAAE,GAAG,EAAE,sBAAsB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM;YACjE,oBAAoB,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM;YAChF,iBAAiB,EAAE,WAAW,EAAE,qBAAqB,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,yBAAyB,EAAE,EAAE;YAC1I,aAAa,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC3F,WAAW,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,yBAAyB,EAAE,uBAAuB;YAClG,iBAAiB,EAAE,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,8BAA8B,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK;SAC9G,CAAC,CAAC,CAAC;QACN,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,IAAI,EAAE,CAAC;QACP,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,SAAS;QAClC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,UAAU,CAAC,0BAA0B,KAAK,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;YACpF,MAAM,GAAG,CAAC,OAAO,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,0BAA0B,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACxB,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC;YAChF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,mBAAmB,IAAI,EAAE,CAAC;YAClG,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,0BAA0B,CAAC,EAAE,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC,EAAE,CAAC;gBACnH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC;oBAAE,MAAM,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,GAAG,GAAG,GAAG,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/L,CAAC;YACD,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC;YACpF,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,0BAA0B,CAAC,CAAC;YAC5K,IAAI,OAAO,EAAE,IAAI;gBAAE,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,YAAY,GAAG,OAAO,CAAC,IAAI,GAAG,UAAU,EAAE;oBAC1G,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,iBAAiB;oBAClG,mBAAmB,EAAE,EAAE,EAAE,wBAAwB,EAAE,CAAC,EAAE,gCAAgC,EAAE,CAAC;iBAC1F,CAAC,CAAC;YACH,GAAG,CAAC,kBAAkB,GAAG,OAAO,EAAE,IAAI,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC;YACvF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;gBAAE,MAAM,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,kBAAkB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,qCAAqC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClP,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC7G,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG;IACnD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;IAC5B,IAAI,CAAC,GAAG,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7K,qFAAqF;IACrF,KAAK,MAAM,IAAI,IAAI,QAAQ;QAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACrP,MAAM,GAAG,CAAC,OAAO,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AACvC,CAAC"}

package/dist/ops/release.d.ts

@@ -0,0 +1,26 @@
+export function changedComponents(paths: any, available: any): any;
+export function editorialCommit(root: any, manifest: any, payload: any): Promise<{
+    request: {
+        target: any;
+        batchId: any;
+        mode: any;
+        paths: string[];
+        deletedPaths: string[];
+    };
+    sha: any;
+}>;
+export function release(root: any, manifest: any, name: any, { component, sha, buildId, editorial }?: {
+    editorial?: boolean | undefined;
+}): Promise<{
+    environment: any;
+    components: any;
+    results: {
+        component: any;
+        environment: any;
+        release: any;
+        digest: any;
+        url: any;
+        rollback: boolean;
+    }[];
+}>;
+//# sourceMappingURL=release.d.ts.map

package/dist/ops/release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../../src/ops/release.js"],"names":[],"mappings":"AAOA,mEAQC;AACD;;;;;;;;;GASC;AACD;;;;;;;;;;;;;GAoCC"}

package/dist/ops/release.js

@@ -0,0 +1,79 @@
+import { readFileSync } from "node:fs";
+import { allowedComponents, loadState } from "./config.js";
+import { build } from "./build.js";
+import { deploy } from "./deploy.js";
+import { capture } from "./process.js";
+import { acknowledgeBatch, validateBuildRequest } from "./editorial.js";
+export function changedComponents(paths, available) {
+    if (!paths.length)
+        return [];
+    const relevant = paths.filter(path => !/^(docs\/|README|CHANGELOG)|\.md$/.test(path));
+    if (!relevant.length)
+        return [];
+    const cms = relevant.some(path => /^apps\/cms\//.test(path));
+    const web = relevant.some(path => /^apps\/web\//.test(path));
+    const shared = relevant.some(path => !/^apps\/(cms|web)\//.test(path));
+    return available.filter(component => shared || (component === "cms" ? cms : web));
+}
+export async function editorialCommit(root, manifest, payload) {
+    const request = validateBuildRequest(payload);
+    allowedComponents(manifest, request.target, ["web-static"]);
+    const app = loadState(root, request.target).apps?.["web-static"];
+    if (!app?.url)
+        throw new Error("No deployed static frontend for this editorial target.");
+    const res = await fetch(app.url + app.health + "?editorial=" + Date.now(), { redirect: "error", signal: AbortSignal.timeout(10000) });
+    const data = await res.json();
+    if (!res.ok || data.status !== "ok" || !/^[a-f0-9]{40}$/.test(data.release || "") || data.backendTarget !== request.target)
+        throw new Error("Editorial target is not a healthy static frontend using this backend.");
+    return { request, sha: data.release };
+}
+export async function release(root, manifest, name, { component, sha, buildId, editorial = false } = {}) {
+    let selected = allowedComponents(manifest, name, component ? [component] : []);
+    const revision = sha || capture("git", ["rev-parse", "HEAD"], { cwd: root });
+    let request;
+    if (editorial) {
+        const event = JSON.parse(readFileSync(process.env.GITHUB_EVENT_PATH, "utf8"));
+        const live = await editorialCommit(root, manifest, event.client_payload);
+        if (live.request.target !== name || live.sha !== revision)
+            throw new Error("Editorial build must check out the exact deployed commit.");
+        request = live.request;
+        selected = ["web-static"];
+    }
+    else if (process.env.GITHUB_EVENT_NAME === "push" && process.env.GITHUB_EVENT_PATH) {
+        const event = JSON.parse(readFileSync(process.env.GITHUB_EVENT_PATH, "utf8"));
+        if (/^[a-f0-9]{40}$/.test(event.before || "") && !/^0+$/.test(event.before)) {
+            try {
+                selected = changedComponents(capture("git", ["diff", "--name-only", event.before, revision], { cwd: root }).split("\n").filter(Boolean), selected);
+            }
+            catch { /* shallow checkout: safely build all allowed components */ }
+        }
+    }
+    const results = [];
+    try {
+        for (const item of selected) {
+            if (name === "production" && item === "cms") {
+                const verified = loadState(root, "staging").apps?.cms?.current;
+                if (!verified || verified.sha !== revision)
+                    throw new Error("Production CMS must promote the staging image for this SHA.");
+                results.push(await deploy(root, manifest, name, item, { release: { ...verified, environment: "production" } }));
+            }
+            else {
+                build(root, manifest, name, item, { sha: revision, buildId, push: true });
+                results.push(await deploy(root, manifest, name, item));
+            }
+        }
+        if (request)
+            await acknowledgeBatch({ request, backend: manifest.environments[name].backendUrl, token: process.env.CMS_BUILD_CALLBACK_TOKEN, status: "success" });
+    }
+    catch (error) {
+        if (request) {
+            try {
+                await acknowledgeBatch({ request, backend: manifest.environments[name].backendUrl, token: process.env.CMS_BUILD_CALLBACK_TOKEN, status: "failure" });
+            }
+            catch { /* original failure remains authoritative; batch is retained */ }
+        }
+        throw error;
+    }
+    return { environment: name, components: selected, results };
+}
+//# sourceMappingURL=release.js.map

package/dist/ops/release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release.js","sourceRoot":"","sources":["../../src/ops/release.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAExE,MAAM,UAAU,iBAAiB,CAAC,KAAK,EAAE,SAAS;IAChD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACpF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO;IAC3D,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9C,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;IACjE,IAAI,CAAC,GAAG,EAAE,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtI,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,aAAa,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACrN,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACxC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,EAAE;IACrG,IAAI,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC;IACZ,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACxI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,QAAQ,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACrF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9E,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC;gBAAC,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;QACnO,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC;gBAC/D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;gBAC3H,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;YAClH,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1E,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpK,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBAAC,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,+DAA+D,CAAC,CAAC;QACzO,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC"}

package/dist/ops/s3.d.ts

@@ -0,0 +1,8 @@
+export function s3Put(bucket: any, key: any, file: any): void;
+export function s3Get(bucket: any, key: any, file: any): void;
+export function s3List(bucket: any, prefix: any, request?: (url: any) => any): {
+    key: any;
+    modified: any;
+    size: number;
+}[];
+//# sourceMappingURL=s3.d.ts.map

package/dist/ops/s3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3.d.ts","sourceRoot":"","sources":["../../src/ops/s3.js"],"names":[],"mappings":"AAQA,8DAEC;AAED,8DAGC;AAID,4DAAkD,QAAG;;;;IAkBpD"}

package/dist/ops/s3.js

@@ -0,0 +1,38 @@
+import { chmodSync } from "node:fs";
+import { capture } from "./process.js";
+function curl(bucket, args) {
+    return capture("curl", ["-K", "-", "--fail-with-body", "--max-time", "60", "-sS", "--aws-sigv4", "aws:amz:" + (bucket.region || "auto") + ":s3", ...args], {
+        input: `user = "${bucket.user}"\n`,
+    });
+}
+export function s3Put(bucket, key, file) {
+    curl(bucket, ["-T", file, `${bucket.endpoint}/${bucket.bucket}/${key}`]);
+}
+export function s3Get(bucket, key, file) {
+    curl(bucket, ["-o", file, `${bucket.endpoint}/${bucket.bucket}/${key}`]);
+    chmodSync(file, 0o600); // backups contain personal data and password hashes
+}
+const decodeXml = (value) => value.replaceAll("&amp;", "&").replaceAll("&lt;", "<").replaceAll("&gt;", ">").replaceAll("&quot;", '"').replaceAll("&apos;", "'");
+export function s3List(bucket, prefix, request = (url) => curl(bucket, [url])) {
+    const objects = [];
+    const tokens = new Set();
+    let token;
+    do {
+        const query = new URLSearchParams({ "list-type": "2", prefix });
+        if (token)
+            query.set("continuation-token", token);
+        const xml = request(`${bucket.endpoint}/${bucket.bucket}?${query}`);
+        const field = (source, name) => decodeXml(source.match(new RegExp(`<${name}>([^<]*)</${name}>`))?.[1] ?? "");
+        objects.push(...[...xml.matchAll(/<Contents>(.*?)<\/Contents>/gs)].map(([, block]) => ({
+            key: field(block, "Key"), modified: field(block, "LastModified"), size: Number(field(block, "Size")),
+        })));
+        if (field(xml, "IsTruncated") !== "true")
+            break;
+        token = field(xml, "NextContinuationToken");
+        if (!token || tokens.has(token))
+            throw new Error("S3 returned an invalid pagination token.");
+        tokens.add(token);
+    } while (token);
+    return objects;
+}
+//# sourceMappingURL=s3.js.map

package/dist/ops/s3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3.js","sourceRoot":"","sources":["../../src/ops/s3.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI;IACxB,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,kBAAkB,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE;QACzJ,KAAK,EAAE,WAAW,MAAM,CAAC,IAAI,KAAK;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACzE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,oDAAoD;AAC9E,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAEhK,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC;IACV,GAAG,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,aAAa,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7G,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACrF,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;SACrG,CAAC,CAAC,CAAC,CAAC;QACL,IAAI,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,KAAK,MAAM;YAAE,MAAM;QAChD,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,QAAQ,KAAK,EAAE;IAChB,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/ops/static-config.d.ts

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+export function redirectsToCaddy(text: any): string[];
+export function headersToCaddy(text: any): string[];
+export function proxiesToCaddy({ media, backend }: {
+    media: any;
+    backend: any;
+}): string[];
+export function buildRoutesCaddy({ redirects, headers, media, backend }: {
+    redirects?: string | undefined;
+    headers?: string | undefined;
+    media: any;
+    backend: any;
+}): string;
+//# sourceMappingURL=static-config.d.ts.map

package/dist/ops/static-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-config.d.ts","sourceRoot":"","sources":["../../src/ops/static-config.js"],"names":[],"mappings":";AAoBA,sDAwBC;AAED,oDAmBC;AAED;;;aAiBC;AAED;;;;;WAQC"}

package/dist/ops/static-config.js

@@ -0,0 +1,96 @@
+#!/usr/bin/env node
+// Turns the static Astro build's Cloudflare-style `_redirects` and `_headers`
+// into Caddy directives, plus the /media and /app/uploads proxies that the
+// Pages Functions used to provide. Output: <dist>/.container/routes.caddy.
+//
+//   APP_ENV=production node FlowPress Deploy apps/web/dist-production
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+function quote(value) {
+    if (/["\s{}]/.test(value) && !/^"[^"]*"$/.test(value)) {
+        return `"${value.replaceAll('"', '\\"')}"`;
+    }
+    return value;
+}
+// FlowPress routing only emits exact paths (see validateRedirects), so every
+// line is "source target status". Both slash variants of a source redirect.
+export function redirectsToCaddy(text) {
+    const lines = [];
+    let index = 0;
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const [source, target, status = "301", ...rest] = line.split(/\s+/);
+        if (rest.length || !source?.startsWith("/") || !target) {
+            throw new Error(`Unsupported _redirects line: ${line}`);
+        }
+        if (/[*:]/.test(source)) {
+            throw new Error(`Splats and placeholders are not supported: ${line}`);
+        }
+        if (!["301", "302", "307", "308"].includes(status)) {
+            throw new Error(`Unsupported redirect status: ${line}`);
+        }
+        const variants = source === "/"
+            ? ["/"]
+            : [source.replace(/\/+$/, ""), `${source.replace(/\/+$/, "")}/`];
+        index += 1;
+        lines.push(`@redirect${index} path ${variants.map(quote).join(" ")}`);
+        lines.push(`redir @redirect${index} ${quote(target)} ${status}`);
+    }
+    return lines;
+}
+export function headersToCaddy(text) {
+    const lines = [];
+    let pattern = null;
+    for (const raw of text.split(/\r?\n/)) {
+        if (!raw.trim() || raw.trim().startsWith("#"))
+            continue;
+        if (!/^\s/.test(raw)) {
+            pattern = raw.trim();
+            if (!pattern.startsWith("/"))
+                throw new Error(`Unsupported _headers pattern: ${pattern}`);
+            continue;
+        }
+        if (!pattern)
+            throw new Error(`Header without a path pattern: ${raw.trim()}`);
+        const separator = raw.indexOf(":");
+        if (separator < 0)
+            throw new Error(`Unsupported _headers line: ${raw.trim()}`);
+        const name = raw.slice(0, separator).trim();
+        const value = raw.slice(separator + 1).trim();
+        const matcher = pattern === "/*" ? "*" : pattern;
+        lines.push(`header ${matcher} ${name} ${quote(value)}`);
+    }
+    return lines;
+}
+export function proxiesToCaddy({ media, backend }) {
+    const lines = [];
+    const mediaUrl = new URL(media);
+    const mediaBase = mediaUrl.pathname.replace(/\/+$/, "");
+    lines.push("handle_path /media/* {");
+    if (mediaBase)
+        lines.push(`\trewrite * ${mediaBase}{uri}`);
+    lines.push(`\treverse_proxy ${mediaUrl.origin} {`);
+    lines.push("\t\theader_up Host {upstream_hostport}");
+    lines.push("\t}");
+    lines.push("}");
+    const backendUrl = new URL(backend);
+    lines.push("handle /app/uploads/* {");
+    lines.push(`\treverse_proxy ${backendUrl.origin} {`);
+    lines.push("\t\theader_up Host {upstream_hostport}");
+    lines.push("\t}");
+    lines.push("}");
+    return lines;
+}
+export function buildRoutesCaddy({ redirects = "", headers = "", media, backend }) {
+    return [
+        "# Generated by FlowPress Deploy. Do not edit.",
+        ...redirectsToCaddy(redirects),
+        ...headersToCaddy(headers),
+        ...proxiesToCaddy({ media, backend }),
+        "",
+    ].join("\n");
+}
+//# sourceMappingURL=static-config.js.map

package/dist/ops/static-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-config.js","sourceRoot":"","sources":["../../src/ops/static-config.js"],"names":[],"mappings":";AACA,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,EAAE;AACF,sEAAsE;AAEtE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,SAAS,KAAK,CAAC,KAAK;IAClB,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,IAAI;IACnC,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,GAAG;YAC7B,CAAC,CAAC,CAAC,GAAG,CAAC;YACP,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACnE,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAI;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACxD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;YAC1F,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,SAAS,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,IAAI,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE;IAC/C,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,SAAS,OAAO,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;IAC/E,OAAO;QACL,+CAA+C;QAC/C,GAAG,gBAAgB,CAAC,SAAS,CAAC;QAC9B,GAAG,cAAc,CAAC,OAAO,CAAC;QAC1B,GAAG,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACrC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/flowpress-deploy.php

@@ -2,14 +2,14 @@
 /**
  * Plugin Name: FlowPress Deploy
  * Description: Revision-safe editorial build queue and deployment capability for FlowPress.
- * Version: 1.0.0-beta.3
+ * Version: 1.0.0-beta.4
  */
 
 if (! defined('ABSPATH')) {
     exit;
 }
 
-define('FLOWPRESS_DEPLOY_VERSION', '1.0.0-beta.3');
+define('FLOWPRESS_DEPLOY_VERSION', '1.0.0-beta.4');
 define('FLOWPRESS_DEPLOY_FILE', __FILE__);
 
 require_once __DIR__ . '/includes/queue-provider.php';