@yannelli/zoomies 0.0.0

package/dist/server/repositories/site-repository.js

@@ -0,0 +1,122 @@
+import { randomUUID } from 'node:crypto';
+import { ConflictError, NotFoundError } from '../domain/errors.js';
+import { SiteSchema } from '../domain/site.js';
+const SITE_COLUMNS = 'id, hostname, upstream_id, tls_mode, created_at, updated_at';
+/**
+ * `code` value SQLite reports for the per-column UNIQUE violation we care
+ * about (the `sites.hostname` unique index).
+ */
+const SQLITE_CONSTRAINT_UNIQUE = 'SQLITE_CONSTRAINT_UNIQUE';
+/**
+ * `code` value SQLite reports when the `sites.upstream_id` foreign key points
+ * at an upstream that does not exist.
+ */
+const SQLITE_CONSTRAINT_FOREIGNKEY = 'SQLITE_CONSTRAINT_FOREIGNKEY';
+function isSqliteError(err) {
+    return err instanceof Error && typeof err.code === 'string';
+}
+export class SiteRepository {
+    db;
+    #insertStmt;
+    #findByIdStmt;
+    #findByHostnameStmt;
+    #listStmt;
+    #updateStmt;
+    #deleteStmt;
+    constructor(db) {
+        this.db = db;
+        this.#insertStmt = db.prepare(`INSERT INTO sites (${SITE_COLUMNS}) VALUES (?, ?, ?, ?, ?, ?)`);
+        this.#findByIdStmt = db.prepare(`SELECT ${SITE_COLUMNS} FROM sites WHERE id = ?`);
+        this.#findByHostnameStmt = db.prepare(`SELECT ${SITE_COLUMNS} FROM sites WHERE hostname = ?`);
+        this.#listStmt = db.prepare(`SELECT ${SITE_COLUMNS} FROM sites ORDER BY hostname ASC`);
+        this.#updateStmt = db.prepare('UPDATE sites SET hostname = ?, upstream_id = ?, tls_mode = ?, updated_at = ? WHERE id = ?');
+        this.#deleteStmt = db.prepare('DELETE FROM sites WHERE id = ?');
+    }
+    create(input) {
+        const id = randomUUID();
+        const now = new Date().toISOString();
+        try {
+            this.#insertStmt.run(id, input.hostname, input.upstreamId, input.tlsMode, now, now);
+        }
+        catch (err) {
+            this.#translateConstraintError(err, input);
+            throw err;
+        }
+        return SiteSchema.parse({
+            id,
+            hostname: input.hostname,
+            upstreamId: input.upstreamId,
+            tlsMode: input.tlsMode,
+            createdAt: now,
+            updatedAt: now,
+        });
+    }
+    findById(id) {
+        const row = this.#findByIdStmt.get(id);
+        return row ? this.#rowToEntity(row) : null;
+    }
+    findByHostname(hostname) {
+        const row = this.#findByHostnameStmt.get(hostname);
+        return row ? this.#rowToEntity(row) : null;
+    }
+    list() {
+        const rows = this.#listStmt.all();
+        return rows.map((row) => this.#rowToEntity(row));
+    }
+    update(id, patch) {
+        const existing = this.#findByIdStmt.get(id);
+        if (!existing) {
+            throw new NotFoundError(`Site with id "${id}" was not found`);
+        }
+        const now = new Date().toISOString();
+        const next = {
+            id: existing.id,
+            hostname: patch.hostname ?? existing.hostname,
+            upstream_id: patch.upstreamId ?? existing.upstream_id,
+            tls_mode: patch.tlsMode ?? existing.tls_mode,
+            created_at: existing.created_at,
+            updated_at: now,
+        };
+        try {
+            this.#updateStmt.run(next.hostname, next.upstream_id, next.tls_mode, next.updated_at, id);
+        }
+        catch (err) {
+            this.#translateConstraintError(err, {
+                hostname: next.hostname,
+                upstreamId: next.upstream_id,
+                tlsMode: next.tls_mode,
+            });
+            throw err;
+        }
+        return this.#rowToEntity(next);
+    }
+    delete(id) {
+        const result = this.#deleteStmt.run(id);
+        return result.changes > 0;
+    }
+    #rowToEntity(row) {
+        return SiteSchema.parse({
+            id: row.id,
+            hostname: row.hostname,
+            upstreamId: row.upstream_id,
+            tlsMode: row.tls_mode,
+            createdAt: row.created_at,
+            updatedAt: row.updated_at,
+        });
+    }
+    #translateConstraintError(err, input) {
+        if (!isSqliteError(err))
+            return;
+        if (err.code === SQLITE_CONSTRAINT_UNIQUE) {
+            throw new ConflictError(`A site with hostname "${input.hostname}" already exists`, {
+                cause: err,
+            });
+        }
+        if (err.code === SQLITE_CONSTRAINT_FOREIGNKEY) {
+            throw new NotFoundError(`Referenced upstream "${input.upstreamId}" does not exist`, {
+                cause: err,
+            });
+        }
+    }
+}
+//# sourceMappingURL=site-repository.js.map

package/dist/server/repositories/site-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-repository.js","sourceRoot":"","sources":["../../../src/server/repositories/site-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAa,MAAM,mBAAmB,CAAC;AAoB1D,MAAM,YAAY,GAAG,6DAA6D,CAAC;AAEnF;;;GAGG;AACH,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAE5D;;;GAGG;AACH,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AASpE,SAAS,aAAa,CAAC,GAAY;IACjC,OAAO,GAAG,YAAY,KAAK,IAAI,OAAQ,GAAuB,CAAC,IAAI,KAAK,QAAQ,CAAC;AACnF,CAAC;AAED,MAAM,OAAO,cAAc;IAQI;IAPpB,WAAW,CAAuE;IAClF,aAAa,CAA+B;IAC5C,mBAAmB,CAA+B;IAClD,SAAS,CAAyB;IAClC,WAAW,CAA+D;IAC1E,WAAW,CAA+B;IAEnD,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;QAChD,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,YAAY,6BAA6B,CAAC,CAAC;QAC/F,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,YAAY,0BAA0B,CAAC,CAAC;QAClF,IAAI,CAAC,mBAAmB,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,YAAY,gCAAgC,CAAC,CAAC;QAC9F,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,YAAY,mCAAmC,CAAC,CAAC;QACvF,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,OAAO,CAC3B,2FAA2F,CAC5F,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,CAAC,KAAiB;QACtB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,yBAAyB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,OAAO,UAAU,CAAC,KAAK,CAAC;YACtB,EAAE;YACF,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAwB,CAAC;QAC9D,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAED,cAAc,CAAC,QAAgB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAwB,CAAC;QAC1E,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAED,IAAI;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAe,CAAC;QAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,KAAiB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAwB,CAAC;QACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAY;YACpB,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;YAC7C,WAAW,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ,CAAC,WAAW;YACrD,QAAQ,EAAE,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ;YAC5C,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,UAAU,EAAE,GAAG;SAChB,CAAC;QAEF,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,yBAAyB,CAAC,GAAG,EAAE;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,WAAW;gBAC5B,OAAO,EAAE,IAAI,CAAC,QAA2B;aAC1C,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,CAAC,EAAU;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,YAAY,CAAC,GAAY;QACvB,OAAO,UAAU,CAAC,KAAK,CAAC;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,yBAAyB,CAAC,GAAY,EAAE,KAAiB;QACvD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;YAAE,OAAO;QAEhC,IAAI,GAAG,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC1C,MAAM,IAAI,aAAa,CAAC,yBAAyB,KAAK,CAAC,QAAQ,kBAAkB,EAAE;gBACjF,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YAC9C,MAAM,IAAI,aAAa,CAAC,wBAAwB,KAAK,CAAC,UAAU,kBAAkB,EAAE;gBAClF,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/server/repositories/upstream-repository.d.ts

@@ -0,0 +1,22 @@
+import type Database from 'better-sqlite3';
+import { type Upstream } from '../domain/upstream.js';
+export declare class UpstreamRepository {
+    private readonly db;
+    private readonly insertUpstreamStmt;
+    private readonly insertTargetStmt;
+    private readonly selectUpstreamByIdStmt;
+    private readonly selectTargetsForUpstreamStmt;
+    private readonly selectAllUpstreamsStmt;
+    private readonly selectAllTargetsStmt;
+    private readonly updateUpstreamStmt;
+    private readonly deleteTargetsForUpstreamStmt;
+    private readonly deleteUpstreamStmt;
+    private readonly touchUpstreamStmt;
+    constructor(db: Database.Database);
+    create(input: Omit<Upstream, 'id' | 'createdAt' | 'updatedAt'>): Upstream;
+    findById(id: string): Upstream | null;
+    list(): Upstream[];
+    update(id: string, patch: Partial<Omit<Upstream, 'id' | 'createdAt' | 'updatedAt'>>): Upstream;
+    delete(id: string): boolean;
+}
+//# sourceMappingURL=upstream-repository.d.ts.map

package/dist/server/repositories/upstream-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream-repository.d.ts","sourceRoot":"","sources":["../../../src/server/repositories/upstream-repository.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C,OAAO,EAAkB,KAAK,QAAQ,EAAuB,MAAM,uBAAuB,CAAC;AAkD3F,qBAAa,kBAAkB;IAYjB,OAAO,CAAC,QAAQ,CAAC,EAAE;IAX/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC9C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACtC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAEN,EAAE,EAAE,QAAQ,CAAC,QAAQ;IA+BlD,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG,QAAQ;IAgCzE,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAQrC,IAAI,IAAI,QAAQ,EAAE;IAclB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC,GAAG,QAAQ;IA6C9F,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAI5B"}

package/dist/server/repositories/upstream-repository.js

@@ -0,0 +1,142 @@
+import { randomUUID } from 'node:crypto';
+import { ConflictError, NotFoundError } from '../domain/errors.js';
+import { UpstreamSchema } from '../domain/upstream.js';
+function isUniqueConstraintError(err) {
+    return (typeof err === 'object' &&
+        err !== null &&
+        typeof err.code === 'string' &&
+        err.code.startsWith('SQLITE_CONSTRAINT_UNIQUE'));
+}
+function rowToUpstream(row, targets) {
+    return UpstreamSchema.parse({
+        id: row.id,
+        name: row.name,
+        targets,
+        loadBalancer: row.load_balancer,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    });
+}
+function targetRowToTarget(row) {
+    return {
+        host: row.host,
+        port: row.port,
+        weight: row.weight,
+    };
+}
+export class UpstreamRepository {
+    db;
+    insertUpstreamStmt;
+    insertTargetStmt;
+    selectUpstreamByIdStmt;
+    selectTargetsForUpstreamStmt;
+    selectAllUpstreamsStmt;
+    selectAllTargetsStmt;
+    updateUpstreamStmt;
+    deleteTargetsForUpstreamStmt;
+    deleteUpstreamStmt;
+    touchUpstreamStmt;
+    constructor(db) {
+        this.db = db;
+        this.insertUpstreamStmt = db.prepare('INSERT INTO upstreams (id, name, load_balancer, created_at, updated_at) VALUES (?, ?, ?, ?, ?)');
+        this.insertTargetStmt = db.prepare('INSERT INTO upstream_targets (upstream_id, host, port, weight, position) VALUES (?, ?, ?, ?, ?)');
+        this.selectUpstreamByIdStmt = db.prepare('SELECT id, name, load_balancer, created_at, updated_at FROM upstreams WHERE id = ?');
+        this.selectTargetsForUpstreamStmt = db.prepare('SELECT upstream_id, host, port, weight, position FROM upstream_targets WHERE upstream_id = ? ORDER BY position ASC');
+        this.selectAllUpstreamsStmt = db.prepare('SELECT id, name, load_balancer, created_at, updated_at FROM upstreams ORDER BY name ASC');
+        this.selectAllTargetsStmt = db.prepare('SELECT upstream_id, host, port, weight, position FROM upstream_targets ORDER BY upstream_id ASC, position ASC');
+        this.updateUpstreamStmt = db.prepare('UPDATE upstreams SET name = ?, load_balancer = ?, updated_at = ? WHERE id = ?');
+        this.deleteTargetsForUpstreamStmt = db.prepare('DELETE FROM upstream_targets WHERE upstream_id = ?');
+        this.deleteUpstreamStmt = db.prepare('DELETE FROM upstreams WHERE id = ?');
+        this.touchUpstreamStmt = db.prepare('UPDATE upstreams SET updated_at = ? WHERE id = ?');
+    }
+    create(input) {
+        const id = randomUUID();
+        const now = new Date().toISOString();
+        const insert = this.db.transaction(() => {
+            this.insertUpstreamStmt.run(id, input.name, input.loadBalancer, now, now);
+            input.targets.forEach((target, position) => {
+                this.insertTargetStmt.run(id, target.host, target.port, target.weight, position);
+            });
+        });
+        try {
+            insert();
+        }
+        catch (err) {
+            if (isUniqueConstraintError(err)) {
+                throw new ConflictError('upstream violates a unique constraint', { cause: err });
+            }
+            throw err;
+        }
+        return rowToUpstream({
+            id,
+            name: input.name,
+            load_balancer: input.loadBalancer,
+            created_at: now,
+            updated_at: now,
+        }, input.targets.map((t) => ({ host: t.host, port: t.port, weight: t.weight })));
+    }
+    findById(id) {
+        const row = this.selectUpstreamByIdStmt.get(id);
+        if (!row)
+            return null;
+        const targets = this.selectTargetsForUpstreamStmt.all(id).map(targetRowToTarget);
+        return rowToUpstream(row, targets);
+    }
+    list() {
+        const rows = this.selectAllUpstreamsStmt.all();
+        if (rows.length === 0)
+            return [];
+        const targetsByUpstream = new Map();
+        for (const row of this.selectAllTargetsStmt.all()) {
+            const bucket = targetsByUpstream.get(row.upstream_id) ?? [];
+            bucket.push(targetRowToTarget(row));
+            targetsByUpstream.set(row.upstream_id, bucket);
+        }
+        return rows.map((row) => rowToUpstream(row, targetsByUpstream.get(row.id) ?? []));
+    }
+    update(id, patch) {
+        const now = new Date().toISOString();
+        const apply = this.db.transaction(() => {
+            const existing = this.selectUpstreamByIdStmt.get(id);
+            if (!existing) {
+                throw new NotFoundError(`upstream not found: ${id}`);
+            }
+            const nextName = patch.name ?? existing.name;
+            const nextLoadBalancer = patch.loadBalancer ?? existing.load_balancer;
+            if (patch.name !== undefined || patch.loadBalancer !== undefined) {
+                this.updateUpstreamStmt.run(nextName, nextLoadBalancer, now, id);
+            }
+            else {
+                this.touchUpstreamStmt.run(now, id);
+            }
+            if (patch.targets !== undefined) {
+                this.deleteTargetsForUpstreamStmt.run(id);
+                patch.targets.forEach((target, position) => {
+                    this.insertTargetStmt.run(id, target.host, target.port, target.weight, position);
+                });
+            }
+        });
+        try {
+            apply();
+        }
+        catch (err) {
+            if (err instanceof NotFoundError) {
+                throw err;
+            }
+            if (isUniqueConstraintError(err)) {
+                throw new ConflictError('upstream violates a unique constraint', { cause: err });
+            }
+            throw err;
+        }
+        const fresh = this.findById(id);
+        if (!fresh) {
+            throw new NotFoundError(`upstream not found after update: ${id}`);
+        }
+        return fresh;
+    }
+    delete(id) {
+        const result = this.deleteUpstreamStmt.run(id);
+        return result.changes > 0;
+    }
+}
+//# sourceMappingURL=upstream-repository.js.map

package/dist/server/repositories/upstream-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream-repository.js","sourceRoot":"","sources":["../../../src/server/repositories/upstream-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAsC,MAAM,uBAAuB,CAAC;AAsB3F,SAAS,uBAAuB,CAAC,GAAY;IAC3C,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,OAAQ,GAAuB,CAAC,IAAI,KAAK,QAAQ;QAChD,GAAuB,CAAC,IAAK,CAAC,UAAU,CAAC,0BAA0B,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAgB,EAAE,OAAyB;IAChE,OAAO,cAAc,CAAC,KAAK,CAAC;QAC1B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO;QACP,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAsB;IAC/C,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,kBAAkB;IAYA;IAXZ,kBAAkB,CAAC;IACnB,gBAAgB,CAAC;IACjB,sBAAsB,CAAC;IACvB,4BAA4B,CAAC;IAC7B,sBAAsB,CAAC;IACvB,oBAAoB,CAAC;IACrB,kBAAkB,CAAC;IACnB,4BAA4B,CAAC;IAC7B,kBAAkB,CAAC;IACnB,iBAAiB,CAAC;IAEnC,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;QAChD,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC,OAAO,CAClC,gGAAgG,CACjG,CAAC;QACF,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC,OAAO,CAChC,iGAAiG,CAClG,CAAC;QACF,IAAI,CAAC,sBAAsB,GAAG,EAAE,CAAC,OAAO,CACtC,oFAAoF,CACrF,CAAC;QACF,IAAI,CAAC,4BAA4B,GAAG,EAAE,CAAC,OAAO,CAC5C,oHAAoH,CACrH,CAAC;QACF,IAAI,CAAC,sBAAsB,GAAG,EAAE,CAAC,OAAO,CACtC,yFAAyF,CAC1F,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,EAAE,CAAC,OAAO,CACpC,+GAA+G,CAChH,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC,OAAO,CAClC,+EAA+E,CAChF,CAAC;QACF,IAAI,CAAC,4BAA4B,GAAG,EAAE,CAAC,OAAO,CAC5C,oDAAoD,CACrD,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC,OAAO,CAAW,oCAAoC,CAAC,CAAC;QACrF,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAC,OAAO,CACjC,kDAAkD,CACnD,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAuD;QAC5D,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACtC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1E,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;gBACzC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACnF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,aAAa,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,OAAO,aAAa,CAClB;YACE,EAAE;YACF,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;SAChB,EACD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAC7E,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,OAAO,GAAG,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACjF,OAAO,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,IAAI;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEjC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA4B,CAAC;QAC9D,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,KAAgE;QACjF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;YAC7C,MAAM,gBAAgB,GAAG,KAAK,CAAC,YAAY,IAAI,QAAQ,CAAC,aAAa,CAAC;YAEtE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACjE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtC,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1C,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;oBACzC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACnF,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,KAAK,EAAE,CAAC;QACV,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,aAAa,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,aAAa,CAAC,oCAAoC,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,EAAU;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/server/validator/nginx-binary.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resolves the NGINX binary path used by the validator.
+ *
+ * Reads `ZOOMIES_NGINX_BIN` on every call (no module-load caching) so tests
+ * can flip the value via `vi.stubEnv` between cases. Falls back to the
+ * conventional `/usr/sbin/nginx` install location.
+ */
+export declare function getNginxBinary(): string;
+//# sourceMappingURL=nginx-binary.d.ts.map

package/dist/server/validator/nginx-binary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nginx-binary.d.ts","sourceRoot":"","sources":["../../../src/server/validator/nginx-binary.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC"}

package/dist/server/validator/nginx-binary.js

@@ -0,0 +1,11 @@
+/**
+ * Resolves the NGINX binary path used by the validator.
+ *
+ * Reads `ZOOMIES_NGINX_BIN` on every call (no module-load caching) so tests
+ * can flip the value via `vi.stubEnv` between cases. Falls back to the
+ * conventional `/usr/sbin/nginx` install location.
+ */
+export function getNginxBinary() {
+    return process.env.ZOOMIES_NGINX_BIN ?? '/usr/sbin/nginx';
+}
+//# sourceMappingURL=nginx-binary.js.map

package/dist/server/validator/nginx-binary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nginx-binary.js","sourceRoot":"","sources":["../../../src/server/validator/nginx-binary.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,iBAAiB,CAAC;AAC5D,CAAC"}

package/dist/server/validator/validate.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Result of running `nginx -t` against a candidate config fragment.
+ *
+ * `ok` is the only field a caller usually needs — the others are kept so the
+ * reload orchestrator (Phase 5) can surface the underlying NGINX message to
+ * the operator on failure.
+ */
+export interface ValidationResult {
+    ok: boolean;
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+}
+/**
+ * Validates an NGINX config fragment with `nginx -t`.
+ *
+ * Strategy: write the fragment to a private temp dir, wrap it in a minimal
+ * `events {} http {}` shell, then invoke the NGINX binary on the wrapper.
+ * The wrapper uses an **absolute** include path — NGINX's `include`
+ * resolves relative paths against its own config-prefix, which we don't
+ * control.
+ *
+ * This function is side-effect-free from the caller's POV: it never mutates
+ * application state, never reloads NGINX, and always cleans its temp dir
+ * (cleanup errors are swallowed so they cannot mask the validation result).
+ * Phase 5 owns deciding what to do with a failed result.
+ */
+export declare function validateConfig(candidate: string): Promise<ValidationResult>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/server/validator/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/server/validator/validate.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAsBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8BjF"}

package/dist/server/validator/validate.js

@@ -0,0 +1,69 @@
+import { execa } from 'execa';
+import { mkdtemp, writeFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { getNginxBinary } from './nginx-binary.js';
+/**
+ * Minimal `http {}` wrapper that lets NGINX type-check a renderer fragment.
+ *
+ * The renderer emits the *contents* of an `http {}` block (an `upstream`
+ * plus one or two `server` blocks). NGINX cannot validate that on its own —
+ * it needs `events {}` and an enclosing `http {}` to even parse. We wrap
+ * here rather than in the renderer so the renderer stays pure and we keep
+ * the validator's wrapping policy in one place.
+ */
+function buildWrapper(siteConfPath) {
+    return `events {
+    worker_connections 1024;
+}
+
+http {
+    include ${siteConfPath};
+}
+`;
+}
+/**
+ * Validates an NGINX config fragment with `nginx -t`.
+ *
+ * Strategy: write the fragment to a private temp dir, wrap it in a minimal
+ * `events {} http {}` shell, then invoke the NGINX binary on the wrapper.
+ * The wrapper uses an **absolute** include path — NGINX's `include`
+ * resolves relative paths against its own config-prefix, which we don't
+ * control.
+ *
+ * This function is side-effect-free from the caller's POV: it never mutates
+ * application state, never reloads NGINX, and always cleans its temp dir
+ * (cleanup errors are swallowed so they cannot mask the validation result).
+ * Phase 5 owns deciding what to do with a failed result.
+ */
+export async function validateConfig(candidate) {
+    const dir = await mkdtemp(join(tmpdir(), 'zoomies-validate-'));
+    try {
+        const sitePath = join(dir, 'site.conf');
+        const wrapperPath = join(dir, 'nginx.conf');
+        await writeFile(sitePath, candidate, 'utf8');
+        await writeFile(wrapperPath, buildWrapper(sitePath), 'utf8');
+        // `reject: false` so a non-zero exit code returns a result rather than
+        // throwing — failure is a normal, expected outcome of validation.
+        // Argv array (never a shell string) per the project's no-shell rule.
+        const result = await execa(getNginxBinary(), ['-t', '-c', wrapperPath], {
+            reject: false,
+        });
+        return {
+            ok: result.exitCode === 0,
+            stdout: result.stdout ?? '',
+            stderr: result.stderr ?? '',
+            exitCode: result.exitCode ?? null,
+        };
+    }
+    finally {
+        // Cleanup must never mask the validation outcome — log and move on.
+        try {
+            await rm(dir, { recursive: true, force: true });
+        }
+        catch (err) {
+            console.warn(`zoomies: failed to remove validator temp dir ${dir}:`, err);
+        }
+    }
+}
+//# sourceMappingURL=validate.js.map

package/dist/server/validator/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/server/validator/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAgBnD;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,YAAoB;IACxC,OAAO;;;;;cAKK,YAAY;;CAEzB,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAE5C,MAAM,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QAE7D,uEAAuE;QACvE,kEAAkE;QAClE,qEAAqE;QACrE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE;YACtE,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;SAClC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,oEAAoE;QACpE,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,gDAAgD,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/server/worker/main.d.ts

@@ -0,0 +1,43 @@
+#!/usr/bin/env node
+/**
+ * Long-running renewal worker entrypoint.
+ *
+ * `main()` runs an outer loop that calls {@link runRenewalCheck} every
+ * {@link WorkerOptions.intervalMs} (default 6 hours), resolves the production
+ * dependencies from the environment once on startup, and races the wait
+ * between iterations against a SIGTERM/SIGINT-driven abort promise so the
+ * worker shuts down promptly on signal.
+ *
+ * Shutdown semantics: we never interrupt a renewal mid-flight. The signal
+ * handlers flip a flag and resolve the abort promise — the loop reads it
+ * **after** the current `runRenewalCheck` returns, then exits cleanly. Let's
+ * Encrypt orders are stateful and a half-completed order tends to consume
+ * rate limit without producing a usable cert, so the cost of a clean wait
+ * is worth more than a few seconds of shutdown latency.
+ *
+ * Importable + runnable: the bottom of this file uses the same
+ * `import.meta.url === pathToFileURL(process.argv[1]).href` shim as
+ * `src/index.ts`, so it works both as `node dist/server/worker/main.js` and
+ * as an imported module from tests.
+ *
+ * The leading `#!/usr/bin/env node` shebang must stay on line 1 for the
+ * `zoomies-worker` bin entry to be directly executable; TypeScript happily
+ * carries the line through to the emitted JS as a comment-shaped no-op.
+ */
+export interface WorkerOptions {
+    /**
+     * Polling cadence between renewal checks. Defaults to 6 hours — short
+     * enough that a missed window heals on its own within a day, long enough
+     * to keep journal noise low.
+     */
+    intervalMs?: number;
+    /** If true, run one renewal check and return. Used by CI smoke tests. */
+    once?: boolean;
+}
+/**
+ * Worker entrypoint. Resolves the production deps from the environment,
+ * then loops `runRenewalCheck` on the configured cadence until a shutdown
+ * signal is received (or `opts.once` is true).
+ */
+export declare function main(opts?: WorkerOptions): Promise<void>;
+//# sourceMappingURL=main.d.ts.map

package/dist/server/worker/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../../src/server/worker/main.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAcH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAwGD;;;;GAIG;AACH,wBAAsB,IAAI,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA0D9D"}