alasio 7.0.0 → 9.0.0

package/dist/cli/src/manifests/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../../src/manifests/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAczC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAGxC,sFAAsF;AACtF,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC;AAElC;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC;AAehC,sCAAsC;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAEpF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEhD,gDAAgD;AAChD,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,OAAO,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,6HAA6H;AAC7H,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;AAE/D,wDAAwD;AACxD,MAAM,UAAU,QAAQ,CAAC,SAAiB;IACxC,OAAO,aAAa,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;AAC5C,CAAC;AAID,sDAAsD;AACtD,MAAM,UAAU,MAAM,CAAC,SAAiB;IACtC,OAAO;QACL,wBAAwB,EAAE,QAAQ;QAClC,4BAA4B,EAAE,OAAO;QACrC,2BAA2B,EAAE,OAAO;QACpC,8BAA8B,EAAE,QAAQ;QACxC,2BAA2B,EAAE,QAAQ;QACrC,6BAA6B,EAAE,SAAS;KACzC,CAAC;AACJ,CAAC;AAED,8HAA8H;AAC9H,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;AAC9D,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAE,4BAA4B,EAAE,OAAO,EAAE,6BAA6B,EAAE,SAAS,EAAE,CAAC;AACjI,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,GAAG,GAAU,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AAE7C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAS,EAAW,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC;AAEpE;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAY;IACrC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;AACtD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,GAAW;IACpD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;AAC3H,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,mBAAmB;IACjC,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,eAAe;IAC7B,OAAO,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACjG,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,KAAK,CAAqC,GAAM,EAAE,KAAQ;IACxE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,KAAK,CAAC,SAA2C;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,QAAQ,CAAC,MAAqB;IAC5C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;AACpD,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,WAAW,CAAC,MAAqB;IAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,KAAK,EAAE,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,OAAO,gBAAgB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;AACzD,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,MAAqB,EAAE,EAAE,MAAM,EAAE,GAAgB,gBAAgB;IACvF,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,kBAAkB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3I,OAAO;QACL,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,UAAU,aAAa,CAAC,WAAW,CAAC,IAAI,SAAS,QAAQ,cAAc,EAAE,EAAE;QACzH,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,eAAe,EAAE;QAC/D,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACjG,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,OAAO,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,WAAW,CAAC,MAAqB;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACpJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9I,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,SAAS,CAAC,OAAuD;IAC/E,OAAO;QACL,WAAW,EAAE,CAAC,eAAe,CAAC;QAC9B,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE;KACnD,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;AAC3F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,sBAAsB,EAAE,QAAQ,EAAE,kCAAkC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,QAAQ,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACxG,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,aAAa,CAAC,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAClJ,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,YAAY,CAAC,MAAqB;IAChD,OAAO;QACL,GAAG,gBAAgB,CAAC,MAAM,CAAC;QAC3B,eAAe,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QAC7E,GAAG,KAAK,CAAC,cAAc,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACzD,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,OAAO,CAAC,MAAqB,EAAE,IAAY,EAAE,GAAW;IACtE,OAAO;QACL,IAAI,EAAE,YAAY,IAAI,EAAE;QACxB,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACxC,eAAe,EAAE,cAAc;QAC/B,OAAO,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,kEAAkE,EAAE,GAAG,CAAC;QACnG,eAAe,EAAE,mBAAmB,EAAE;QACtC,GAAG,eAAe,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,2IAA2I;AAC3I,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,aAAa,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1I,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,MAAM,CAAC,GAAG,KAAe;IACvC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,kFAAkF;AAClF,SAAS,UAAU,CAAC,IAAY,EAAE,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,KAAc,EAAE,MAAe;IACpD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AACtJ,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC"}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../../src/manifests/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiBzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAGxC,sFAAsF;AACtF,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC;AAElC;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC;AAehC,sCAAsC;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAEpF,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,gDAAgD;AAChD,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,OAAO,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,6HAA6H;AAC7H,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC;AAEvE,wDAAwD;AACxD,MAAM,UAAU,QAAQ,CAAC,SAAiB;IACxC,OAAO,aAAa,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;AAC5C,CAAC;AAID,sDAAsD;AACtD,MAAM,UAAU,MAAM,CAAC,SAAiB;IACtC,OAAO;QACL,wBAAwB,EAAE,QAAQ;QAClC,4BAA4B,EAAE,OAAO;QACrC,2BAA2B,EAAE,OAAO;QACpC,8BAA8B,EAAE,QAAQ;QACxC,2BAA2B,EAAE,QAAQ;QACrC,6BAA6B,EAAE,SAAS;KACzC,CAAC;AACJ,CAAC;AAED,8HAA8H;AAC9H,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,MAAM,EAAE,2BAA2B,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAE,4BAA4B,EAAE,OAAO,EAAE,6BAA6B,EAAE,SAAS,EAAE,CAAC;AACjI,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,GAAG,GAAU,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AAE7C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAS,EAAW,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC;AAEpE,kGAAkG;AAClG,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,EAAE,GAAG,EAAS,EAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;AAE7D;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAY;IACrC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;AACtD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,GAAW;IACpD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;AAC3H,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,mBAAmB;IACjC,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,eAAe;IAC7B,OAAO,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACjG,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,KAAK,CAAqC,GAAM,EAAE,KAAQ;IACxE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,KAAK,CAAC,SAA2C;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,QAAQ,CAAC,MAAqB;IAC5C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;AACpD,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,WAAW,CAAC,MAAqB;IAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,KAAK,EAAE,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,OAAO,gBAAgB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;AACzD,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,MAAqB,EAAE,EAAE,MAAM,EAAE,GAAgB,gBAAgB;IACvF,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,kBAAkB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3I,OAAO;QACL,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,UAAU,aAAa,CAAC,WAAW,CAAC,IAAI,SAAS,QAAQ,cAAc,EAAE,EAAE;QACzH,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,eAAe,EAAE;QAC/D,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACjG,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,OAAO,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,WAAW,CAAC,MAAqB;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACpJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9I,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,SAAS,CAAC,OAAuD;IAC/E,OAAO;QACL,WAAW,EAAE,CAAC,eAAe,CAAC;QAC9B,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE;KACnD,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;AAC3F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,sBAAsB,EAAE,QAAQ,EAAE,kCAAkC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,QAAQ,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACxG,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,aAAa,CAAC,WAAW,CAAC,IAAI,SAAS,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAClJ,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,YAAY,CAAC,MAAqB;IAChD,OAAO;QACL,GAAG,gBAAgB,CAAC,MAAM,CAAC;QAC3B,eAAe,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QAC7E,GAAG,KAAK,CAAC,cAAc,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACzD,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,OAAO,CAAC,MAAqB,EAAE,IAAY,EAAE,GAAW;IACtE,OAAO;QACL,IAAI,EAAE,YAAY,IAAI,EAAE;QACxB,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACxC,eAAe,EAAE,cAAc;QAC/B,OAAO,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,kEAAkE,EAAE,GAAG,CAAC;QACnG,eAAe,EAAE,mBAAmB,EAAE;QACtC,GAAG,eAAe,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,2IAA2I;AAC3I,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,aAAa,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1I,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,MAAM,CAAC,GAAG,KAAe;IACvC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,kFAAkF;AAClF,SAAS,UAAU,CAAC,IAAY,EAAE,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,KAAc,EAAE,MAAe;IACpD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AACtJ,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,SAAiB,EAAE,SAAiB,EAAE,KAAqB;IACtG,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;IACzE,OAAO;QACL,EAAE,UAAU,EAAE,8BAA8B,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC7E;YACE,UAAU,EAAE,8BAA8B;YAC1C,IAAI,EAAE,aAAa;YACnB,QAAQ;YACR,OAAO,EAAE,EAAE,QAAQ,EAAE,2BAA2B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;YAC/E,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;SAC5E;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/src/manifests/config.js

@@ -117,8 +117,8 @@ const Alasio = Schema.Struct({
 });
 /**
  * alasio's telemetry: everything (alasio's, its harnesses', bayma's, the lake's and the
- * stack's) goes through the stack's collector to the lake, and to otlpEndpoint too when
- * one is set.
+ * stack's) goes through the stack's collector, by the log, to the lake, and to
+ * otlpEndpoint too when one is set.
  */
 const Telemetry = Schema.Struct({
     /** Where the collector also sends all it receives; empty sends it to the lake alone. */
@@ -128,18 +128,22 @@ const Telemetry = Schema.Struct({
     headersSecret: defaulted(OptionalSecretName, ""),
     headersKey: defaulted(NonEmpty, "headers"),
     resourceAttributes: defaulted(Schema.String, ""),
-    /** The port alasio receives session sandboxes' telemetry on. */
+    /** The port the sandbox service's receiver takes session sandboxes' telemetry on. */
     receiverPort: defaulted(Schema.Int.check(Schema.isBetween({ minimum: 1024, maximum: 65535 }, { message: "must be a port from 1024 to 65535" })), 4318),
     /** How many days of telemetry the lake keeps. */
     retentionDays: defaulted(Schema.Int.check(Schema.isGreaterThanOrEqualTo(1, { message: "must be at least 1" })), 30),
-    /** The stack's collector, through which all of it goes. */
+    /**
+     * The stack's collector, through which all of it goes, in two parts on one image
+     * (images.collector): its gateway, which every producer exports to and which writes it to
+     * the log, scaling on its CPU where min and max are apart; and its scraper, one replica,
+     * which scrapes the stack and exports what it scrapes to the gateway.
+     */
     collector: defaulted(Schema.Struct({
-        image: Image({
-            repository: "otel/opentelemetry-collector-contrib",
-            tag: "0.161.0",
-            digest: "sha256:fd328de2552466ad78385e1b1289c3f2402b1c45f265b252aab1955b42845ac1",
-        }),
-        resources: Resources({ requests: { cpu: "50m", memory: "128Mi" }, limits: { memory: "512Mi" } }),
+        gateway: defaulted(Schema.Struct({
+            scaling: Scaling({ min: 1, max: 1 }, { floor: true, scaled: true }),
+            resources: Resources({ requests: { cpu: "50m", memory: "96Mi" }, limits: { memory: "512Mi" } }),
+        }), {}),
+        scraper: defaulted(Schema.Struct({ resources: Resources({ requests: { cpu: "50m", memory: "128Mi" }, limits: { memory: "512Mi" } }) }), {}),
     }), {}),
 });
 /**
@@ -147,8 +151,44 @@ const Telemetry = Schema.Struct({
  * (sessions.runtimeClassName), by the node agent on each node sessions run on.
  */
 const Snapshots = Schema.Struct({
-    /** How long a session's bayma runs no exec before its sandbox is snapshotted and its pod let go: a duration such as 5m. */
+    /**
+     * How long a session's bayma runs no exec before its sandbox is snapshotted and its pod let
+     * go: a duration such as 5m. Until then its pod is evicted by no drain, and its node is
+     * removed by no node autoscaler (cli/src/manifests/disruption.ts boundBudget), so a drain
+     * waits this long after a session's last exec, and longer for a session that goes on working.
+     */
     releaseAfter: defaulted(Schema.String.check(Schema.makeFilter((duration) => (durationSeconds(duration) ?? 0) > 0 || "must be a duration such as 5m")), "5m"),
+    /**
+     * How often a session whose execs run is snapshotted live, its sandbox running on, from
+     * that long after they began: the snapshot its pod, ended where it is, is restored from,
+     * while bayma's state generation is still the one it caught. A duration such as 10m.
+     */
+    liveEvery: defaulted(Schema.String.check(Schema.makeFilter((duration) => (durationSeconds(duration) ?? 0) > 0 || "must be a duration such as 10m")), "10m"),
+    /**
+     * How long a session's bayma holds its stop when its pod is ended by other than alasio,
+     * as a drain, another eviction through the API server (a preemption's, a NoExecute
+     * taint's) or a deletion ends it, for alasio to snapshot it first as it releases a session
+     * (bayma's --stop-wait-ms): its pod's grace period is this and 30 s more for bayma's own
+     * stop. More than 15 s, as alasio looks for ending pods every 15 s, and at most 10m, as a
+     * drain waits on each pod. The node agents run as a DaemonSet, which a drain leaves in
+     * place. Each node snapshots two such sessions at a time, the others waiting their turn; one
+     * whose snapshot fails, or whose turn comes once its bayma holds its stop no more, comes
+     * back from bayma's checkpoints. A pod that ends where it is, with no grace or the kubelet's
+     * own, as its sandbox's crash, an OOM kill, an eviction for the node's pressure, soft or
+     * hard, or a graceful shutdown of its node ends it, takes no snapshot: the kubelet deletes
+     * no pod first, and says why it ends one only once it has ended. The next turn brings it
+     * back from its live snapshot while that still holds it, and otherwise from bayma's
+     * checkpoints. A pod deleted outright, as kubectl delete --force or the removal of its Node
+     * deletes it, or one ended that alasio is not running to see, as on a single node that a
+     * drain empties of alasio too, the gateway releases as broken, and the next turn binds
+     * another, whose bayma starts from its checkpoints, moving on from its live snapshot, which
+     * no restore takes after. A duration
+     * such as 60s.
+     */
+    stopWait: defaulted(Schema.String.check(Schema.makeFilter((duration) => {
+        const seconds = durationSeconds(duration) ?? 0;
+        return (seconds > 15 && seconds <= 600) || "must be a duration of more than 15s and at most 10m, such as 60s";
+    })), "60s"),
     /** The most of snapshots each node keeps on its disk, for restores there. */
     nodeCache: defaulted(Size, "5Gi"),
     /**
@@ -160,17 +200,91 @@ const Snapshots = Schema.Struct({
      */
     nodeAgent: defaulted(Schema.Struct({ resources: Resources({ requests: { cpu: "20m", memory: "160Mi" }, limits: { memory: "512Mi" } }) }), {}),
 });
+/**
+ * The webhook intake (./webhook.ts), the one thing of alasio's the internet reaches,
+ * which Telegram delivers each environment's bot's updates to, on `port` of
+ * `publicAddress`, over HTTPS with a certificate of its own that alasio uploads to
+ * Telegram as it registers each bot. How it is reached its target makes (`exposure`,
+ * alasio's own to say): on this machine's address, from k3s on it, which then needs
+ * `publicAddress` to be that address, and binds it alone, leaving the machine's other
+ * addresses' port to whatever has it; on its node's, in Docker, whose port the machine
+ * maps; or through a LoadBalancer Service. `publicAddress` is the address Telegram is told,
+ * which its certificate is made for: the machine's, or the LoadBalancer's, or a name of
+ * either. On a machine's or a node's address it runs one replica. `sources` are the
+ * networks it takes its port from on this machine's address or a LoadBalancer's, its
+ * NetworkPolicy's and the LoadBalancer's: Telegram's, as its Bot API's guide to webhooks
+ * lists them (core.telegram.org/bots/webhooks), which Telegram may change; a change shows
+ * in each bot's getWebhookInfo as a last error, which alasio logs and alasio status says,
+ * each pointing here, where it is set.
+ */
+const Webhook = Schema.Struct({
+    publicAddress: defaulted(matching(/^(|(\d{1,3}\.){3}\d{1,3}|[a-z0-9]([-a-z0-9.]{0,251}[a-z0-9])?)$/u, "must be an IPv4 address or a host name, or empty"), ""),
+    /** One of the ports Telegram delivers to. */
+    port: defaulted(Schema.Literals([443, 80, 88, 8443]), 443),
+    exposure: defaulted(Schema.Literals(["hostAddress", "node", "loadBalancer"]), "node"),
+    sources: defaulted(Schema.Array(matching(/^[0-9.]+\/[0-9]{1,2}$/u, "must be an IPv4 CIDR")).check(Schema.isMinLength(1, { message: "must list a network at least" })), ["149.154.160.0/20", "91.108.4.0/22"]),
+    scaling: Scaling({ min: 1, max: 1 }, { floor: true, scaled: false }),
+    resources: Resources({ requests: { cpu: "10m", memory: "48Mi" }, limits: { memory: "192Mi" } }),
+});
+/**
+ * The least memory the log's broker is given: the heap of 512 MiB it is run at (./log.ts),
+ * and the JVM's own beside it.
+ */
+export const LOG_MEMORY = "768Mi";
+/** A segment of the log's partitions at most: what its retention deletes at once, a closed one. */
+export const LOG_SEGMENT_BYTES = 64 * 1024 * 1024;
+/** How many partitions the log's telemetry topics have together: three topics, of as many as the lake's intake runs replicas at most. */
+const telemetryPartitions = (config) => 3 * Math.max(1, config.lake.intake.scaling.max);
+/**
+ * How many bytes each partition of the log's telemetry topics keeps at most: three
+ * quarters of a node's volume shared among them, the rest Telegram's topics' and KRaft's,
+ * less the segment each writes beside those it keeps, as retention deletes closed segments
+ * alone.
+ */
+/** How much longer than the filer store's backups go back the log keeps its records: the day a restore and the lake's reconciliation take, and more. */
+export const LOG_RETENTION_MARGIN_HOURS = 24;
+/**
+ * How far back the filer store's backups go, in hours: `keep` of them, taken on `schedule`
+ * at a fixed minute of every hour, of every Nth hour, or of a fixed hour each day; null for a
+ * schedule of another form, which is not known so.
+ */
+export function filerStoreBackupHours({ schedule, keep }) {
+    const [minute = "", hour = "", ...rest] = schedule.trim().split(/\s+/u);
+    if (rest.length !== 3 || rest.some((field) => field !== "*") || !/^[0-9]+$/u.test(minute))
+        return null;
+    const every = hour === "*" ? 1 : /^\*\/([1-9][0-9]*)$/u.exec(hour)?.[1];
+    if (every !== undefined)
+        return Number(every) * keep;
+    return /^[0-9]+$/u.test(hour) ? 24 * keep : null;
+}
+export function telemetryRetentionBytes(config) {
+    return Math.floor((memoryBytes(config.log.storage.size) * 3) / 4 / telemetryPartitions(config)) - LOG_SEGMENT_BYTES;
+}
+/**
+ * The log (./log.ts), beside Neon: Apache Kafka in KRaft, its partitions' segments on a
+ * volume of each of its nodes, which KRaft's metadata, its principals and ACLs among it,
+ * is on too. Its nodes are brokers and KRaft's controllers both, 1, or 3 in a quorum, their
+ * count set as the log is made and never changed after, as KRaft's voters are fixed. It is
+ * a buffer, not a store: what it holds is kept for `retention`, within its volume, the lake
+ * keeping what is read from it. That is also what the lake's telemetry is refilled from where
+ * the lake loses files, as a restore of the filer store's oldest backup loses what was written
+ * since (filerStoreBackupHours): so it keeps them, and a day more, LOG_RETENTION_MARGIN_HOURS.
+ */
+const Log = Schema.Struct({
+    scaling: Scaling({ min: 1, max: 1 }, { floor: true, scaled: false, most: 3 }),
+    retention: defaulted(matching(/^[1-9][0-9]*h$/u, "must be a number of hours, such as 24h"), "72h"),
+    storage: Storage("4Gi"),
+    resources: Resources({ requests: { cpu: "100m", memory: "512Mi" }, limits: { memory: "1Gi" } }),
+});
 const Sessions = Schema.Struct({
     enabled: defaulted(Schema.Boolean, true),
     namespace: defaulted(Namespace, "alasio-sessions"),
     createNamespace: defaulted(Schema.Boolean, true),
     /** The RuntimeClass sessions run under; empty runs them under the cluster's default runtime. */
     runtimeClassName: defaulted(Schema.String, "gvisor"),
-    /** A new session's volume; its class, when empty, is workspace storage's, or the cluster's default without it. */
-    storage: Storage("10Gi"),
+    /** A new session's workspace: its quota, of workspace storage. */
+    storage: defaulted(Schema.Struct({ size: defaulted(Size, "10Gi") }), {}),
     resources: Resources({ requests: { cpu: "250m", memory: "512Mi" }, limits: { cpu: "2", memory: "2Gi" } }),
-    /** Whether a session's pod waits until NetworkPolicy confines it. */
-    egressGate: defaulted(Schema.Boolean, true),
     /** The resolvers sessions with internet access use. */
     fullModeNameservers: defaulted(Schema.Array(Schema.String.check(Schema.makeFilter((address) => isIPv4(address) || "must be an IPv4 address"))).check(Schema.isMinLength(1, { message: "must list from one to three resolvers" }), Schema.isMaxLength(3, { message: "must list from one to three resolvers" })), ["1.1.1.1", "8.8.8.8"]),
     /** What sessions with internet access may not reach. */
@@ -178,17 +292,29 @@ const Sessions = Schema.Struct({
     nodeSelector: NodeSelector,
     tolerations: Tolerations,
     snapshots: defaulted(Snapshots, {}),
+    /**
+     * The sandbox pools' free pods, of each of a session's internets (cli/src/manifests/
+     * sandbox-gateway.ts): `min` kept running before any is bound, more made, to `max`, for
+     * the binds that wait for one.
+     */
+    pools: Scaling({ min: 1, max: 10 }, { floor: false, scaled: true }),
+    /** The sandbox gateway, which binds a session's workspace to a pool's pod. */
+    gateway: defaulted(Schema.Struct({ resources: Resources({ requests: { cpu: "20m", memory: "96Mi" }, limits: { memory: "256Mi" } }) }), {}),
+    /** The session telemetry receiver, which bound pods' bayma exports to. */
+    receiver: defaulted(Schema.Struct({ resources: Resources({ requests: { cpu: "20m", memory: "96Mi" }, limits: { memory: "256Mi" } }) }), {}),
 });
+/** The bayma the host profile's folder instances run, as this release pins it. */
+export const HOST_BAYMA_IMAGE = {
+    repository: "ghcr.io/eaucoin/bayma",
+    tag: "0.14.6",
+    digest: "sha256:13b6943969e77e5681a47d53ccd77850ef755f2c0ed280d8e39db97851f79e42",
+};
 const Host = Schema.Struct({
     /** The host profile: folder workspaces on the machine's own files. Privileged, for a single-node cluster the operator owns. */
     enabled: defaulted(Schema.Boolean, false),
     namespace: defaulted(Namespace, "alasio-host"),
     createNamespace: defaulted(Schema.Boolean, true),
-    baymaImage: Image({
-        repository: "ghcr.io/eaucoin/bayma",
-        tag: "0.13.0",
-        digest: "sha256:840bfbbb660c5a0fefb562448db2ee93ceef3715142e538c7717ef9c34f3acc1",
-    }),
+    baymaImage: Image(HOST_BAYMA_IMAGE),
     /** The operator's user and home, which alasio and each folder's bayma run as and in. */
     uid: defaulted(Id, 1000),
     gid: defaulted(Id, 1000),
@@ -196,6 +322,8 @@ const Host = Schema.Struct({
     home: defaulted(AbsolutePath, "/home/operator"),
     /** Where folder workspaces' bayma keeps its state, under a mount. */
     stateRoot: defaulted(AbsolutePath, "/home/operator/.alasio/bayma"),
+    /** How long a folder conversation's instance runs no exec before it is released, its REPL sessions saved whole as it stops (src/gateway/folders.ts). */
+    releaseAfter: defaulted(Schema.String.check(Schema.makeFilter((duration) => (durationSeconds(duration) ?? 0) > 0 || "must be a duration such as 1h")), "1h"),
     mounts: defaulted(Schema.Array(HostMount), []),
     /** The directory folder workspaces are created under, a path of the mounts; empty leaves alasio's default. */
     workspaceRoot: defaulted(matching(/^(|\/.*)$/u, "must be an absolute path, or empty"), ""),
@@ -210,7 +338,10 @@ const NeonStored = (size, resources) => defaulted(Schema.Struct({ storage: Stora
 const NeonService = (resources) => defaulted(Schema.Struct({ resources: Resources(resources) }), {});
 const Neon = Schema.Struct({
     enabled: defaulted(Schema.Boolean, true),
-    /** Without Neon, alasio's database: a Secret with `url` and `lake-verifier`, the SCRAM verifier of the lake role's password. */
+    /**
+     * Without Neon, alasio's database: a Secret with `url`, `lake-verifier` and `harness-verifier`, the SCRAM verifiers
+     * of the lake role's password and the harness host's.
+     */
     external: defaulted(Schema.Struct({ existingSecret: defaulted(OptionalSecretName, "") }), {}),
     image: Image({
         repository: "neondatabase/neon",
@@ -236,7 +367,15 @@ const Neon = Schema.Struct({
         storage: Storage("20Gi"),
         resources: Resources({ requests: { cpu: "50m", memory: "64Mi" }, limits: { memory: "1Gi" } }),
     }), {}),
-    pageserver: NeonStored("50Gi", { requests: { cpu: "100m", memory: "256Mi" }, limits: { memory: "4Gi" } }),
+    pageserver: defaulted(Schema.Struct({
+        /**
+         * How many pageservers serve the tenant's shards: a count, each registering itself
+         * with the storage controller, which keeps it; lowered, alasio up refuses, saying so.
+         */
+        scaling: Scaling({ min: 1, max: 1 }, { floor: true, scaled: false }),
+        storage: Storage("50Gi"),
+        resources: Resources({ requests: { cpu: "100m", memory: "256Mi" }, limits: { memory: "4Gi" } }),
+    }), {}),
     storageController: NeonService({ requests: { cpu: "20m", memory: "64Mi" }, limits: { memory: "512Mi" } }),
     storageBroker: NeonService({ requests: { cpu: "20m", memory: "32Mi" }, limits: { memory: "256Mi" } }),
     controllerDb: NeonStored("2Gi", { requests: { cpu: "50m", memory: "64Mi" }, limits: { memory: "512Mi" } }),
@@ -255,6 +394,14 @@ const Neon = Schema.Struct({
         suspendAfter: defaulted(Schema.String.check(Schema.makeFilter((duration) => (durationSeconds(duration) ?? 0) >= 60 || "must be a duration of 1m or more, such as 5m")), "5m"),
         resources: Resources({ requests: { cpu: "250m", memory: "384Mi" }, limits: { memory: "4Gi" } }),
     }), {}),
+    /**
+     * How many shards the storage controller splits alasio's tenant into, across the
+     * pageservers: a power of two, at most 16. A split is one-way, as Neon merges no shards:
+     * raised, the tenant is split; lowered, alasio up refuses, saying so.
+     */
+    shards: defaulted(Schema.Int.check(Schema.makeFilter((shards) => (shards >= 1 && shards <= 16 && (shards & (shards - 1)) === 0) || "must be a power of two from 1 to 16")), 1),
+    /** Each branch's read replica, which its lake loads from, beside its primary: smaller, as it serves the loader alone. */
+    readReplica: defaulted(Schema.Struct({ resources: Resources({ requests: { cpu: "100m", memory: "192Mi" }, limits: { memory: "1Gi" } }) }), {}),
     /**
      * A daily logical dump of alasio's database to the object store, and a copy of
      * JuiceFS's newest dump of workspace storage's metadata beside it; of each, the last
@@ -398,50 +545,23 @@ export function durationSeconds(duration) {
         return null;
     return Number(match[1] ?? 0) * 3600 + Number(match[2] ?? 0) * 60 + Number(match[3] ?? 0);
 }
-/** A component of JuiceFS's CSI driver: its resources. */
-const CsiComponent = (resources) => defaulted(Schema.Struct({ resources: Resources(resources) }), {});
 /**
- * JuiceFS's CSI driver (juicedata/juicefs-csi-driver v0.33.0), which makes each session's
- * claim a directory of the file system, its size the directory's quota; off where the
- * cluster already has the driver. Its images are those that release names.
+ * The cron schedule of something done every `duration`: of whole minutes, 5 or more, that
+ * divide an hour, at those minutes of each hour; of whole hours that divide a day, on the
+ * hour, at those hours of each day; null for another, which no cron line keeps evenly. Pure, for tests.
  */
-const Csi = Schema.Struct({
-    enabled: defaulted(Schema.Boolean, true),
-    /** Where the driver and its mount pods run, as upstream installs them. */
-    namespace: defaulted(Namespace, "kube-system"),
-    image: Image({
-        repository: "juicedata/juicefs-csi-driver",
-        tag: "v0.33.0",
-        digest: "sha256:f918e7331c055ec7efb5a13ff4f81def57620defb003f7379c28fa97822ff44d",
-    }),
-    /** The JuiceFS client mount pods run, Community Edition. */
-    mountImage: Image({
-        repository: "juicedata/mount",
-        tag: "ce-v1.4.1",
-        digest: "sha256:ab99388a397fe52575fdeb84a9e017c3c594a6b07d63966cd4805bbf6f172673",
-    }),
-    registrarImage: Image({
-        repository: "registry.k8s.io/sig-storage/csi-node-driver-registrar",
-        tag: "v2.9.0",
-        digest: "sha256:cd21e19cd8bbd5bc56f1b4f1398a436e7897da2995d6d036c9729be3f4e456e6",
-    }),
-    resizerImage: Image({
-        repository: "registry.k8s.io/sig-storage/csi-resizer",
-        tag: "v1.9.0",
-        digest: "sha256:f1f352df97874442624fcef23eab04aa038f66cb0e361212f6ec09e92998184d",
-    }),
-    livenessProbeImage: Image({
-        repository: "registry.k8s.io/sig-storage/livenessprobe",
-        tag: "v2.11.0",
-        digest: "sha256:82adbebdf5d5a1f40f246aef8ddbee7f89dea190652aefe83336008e69f9a89f",
-    }),
-    controller: CsiComponent({ requests: { cpu: "20m", memory: "64Mi" }, limits: { memory: "512Mi" } }),
-    node: CsiComponent({ requests: { cpu: "20m", memory: "64Mi" }, limits: { memory: "512Mi" } }),
-    /** Each mount pod's: no CPU limit, which JuiceFS advises against below 4, and memory for its buffer and cache index. */
-    mountPod: CsiComponent({ requests: { cpu: "20m", memory: "128Mi" }, limits: { memory: "1Gi" } }),
-    /** One mount pod per node for every workspace rather than one per workspace: less memory, and a crash reaches each workspace on the node. */
-    shareMountPod: defaulted(Schema.Boolean, false),
-});
+export function everyIntervalCron(duration) {
+    const seconds = durationSeconds(duration);
+    if (seconds === null || seconds < 300 || seconds % 60 !== 0)
+        return null;
+    const minutes = seconds / 60;
+    if (minutes < 60)
+        return 60 % minutes === 0 ? `*/${minutes} * * * *` : null;
+    const hours = minutes / 60;
+    if (!Number.isInteger(hours) || 24 % hours !== 0)
+        return null;
+    return hours === 24 ? "0 0 * * *" : `0 */${hours} * * *`;
+}
 /** Valkey, the file system's metadata engine. */
 const Valkey = Schema.Struct({
     image: Image(VALKEY_IMAGE),
@@ -452,40 +572,30 @@ const Valkey = Schema.Struct({
     resources: Resources({ requests: { cpu: "20m", memory: "64Mi" }, limits: { memory: "768Mi" } }),
 });
 /**
- * Workspace storage: each new session's workspace a volume of one JuiceFS file system,
- * its metadata in a Valkey of alasio's own and its data in the object store's
- * `workspaces` bucket. Without it, new workspaces are volumes of sessions.storage's
- * class, the cluster's default unless it names one; a workspace keeps the volume it was
- * made with either way.
+ * Workspace storage: each session's workspace a directory of one JuiceFS file system, its
+ * metadata in a Valkey of alasio's own and its data in the object store's `workspaces`
+ * bucket, which each node mounts whole (./sandbox-gateway.ts workspaceMount). The sandbox
+ * service runs on it alone.
  */
 const WorkspaceStorage = Schema.Struct({
     enabled: defaulted(Schema.Boolean, true),
     /** The file system's name, which its data is kept under in the bucket. */
     name: defaulted(matching(/^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$/u, "must be a JuiceFS file system name"), "workspaces"),
-    /** The StorageClass of its volumes, which sessions' claims are of unless sessions.storage names another. */
-    storageClassName: defaulted(matching(NAME, "must be a StorageClass name"), "alasio-workspaces"),
     /** How many days a deleted file is kept in the file system's trash, 0 for none; set as the file system is first made. */
     trashDays: defaulted(Schema.Int.check(Schema.isGreaterThanOrEqualTo(0, { message: "must be 0 or more" })), 1),
-    /** How often JuiceFS dumps the file system's metadata to its bucket's meta/: a duration of 5m or more, the least it takes. */
-    backupInterval: defaulted(Schema.String.check(Schema.makeFilter((duration) => (durationSeconds(duration) ?? 0) >= 300 || "must be a duration of 5m or more, such as 1h")), "1h"),
+    /** How often the file system's metadata is dumped to its bucket's meta/ (./workspace-storage.ts metadataDump): a schedule a cron line keeps, as everyIntervalCron says. */
+    backupInterval: defaulted(Schema.String.check(Schema.makeFilter((duration) => everyIntervalCron(duration) !== null || "must be 5m or more, of whole minutes that divide an hour or whole hours that divide a day, such as 1h")), "1h"),
     /** Each mount's read cache on its node's disk, in MiB. */
     cacheSizeMiB: defaulted(Schema.Int.check(Schema.isGreaterThanOrEqualTo(0, { message: "must be 0 or more" })), 1024),
-    csi: defaulted(Csi, {}),
+    /** JuiceFS's command line, Community Edition, which its admin jobs run: of the version the nodes' mount is (../../../Dockerfile). */
+    image: Image({
+        repository: "juicedata/mount",
+        tag: "ce-v1.4.1",
+        digest: "sha256:ab99388a397fe52575fdeb84a9e017c3c594a6b07d63966cd4805bbf6f172673",
+    }),
     valkey: defaulted(Valkey, {}),
-});
-/** agent-sandbox's controller, installed once per cluster; off where the cluster already has it. */
-const AgentSandbox = Schema.Struct({
-    enabled: defaulted(Schema.Boolean, true),
-    image: defaulted(Schema.Struct({
-        repository: defaulted(NonEmpty, "registry.k8s.io/agent-sandbox/agent-sandbox-controller"),
-        tag: defaulted(Schema.String, "v1.0.5"),
-        digest: defaulted(Digest, "sha256:28a9cbdbfd6ac0a4e5c7e9261ace1aa30ee2da681cb640dccdfed98e8dd9d98b"),
-        pullPolicy: defaulted(PullPolicy, "IfNotPresent"),
-    }), {}),
-    resources: Resources({ requests: { cpu: "20m", memory: "32Mi" }, limits: { memory: "256Mi" } }),
-    nodeSelector: NodeSelector,
-    tolerations: Tolerations,
-    affinity: Affinity,
+    /** Each node's mount of the file system, which the node agent attaches session workspaces from (./sandbox-gateway.ts). */
+    mount: defaulted(Schema.Struct({ resources: Resources({ requests: { cpu: "50m", memory: "128Mi" }, limits: { memory: "1Gi" } }) }), {}),
 });
 /** A container of a controller alasio installs: its pinned image and its resources. */
 const ControllerContainer = (image, resources) => defaulted(Schema.Struct({ image: Image(image), resources: Resources(resources) }), {});
@@ -546,6 +656,13 @@ function completeness(config) {
     if (!config.neon.enabled && !config.neon.external.existingSecret) {
         return { path: ["neon", "external", "existingSecret"], issue: "is required when neon.enabled is false" };
     }
+    const { webhook } = config;
+    if (webhook.exposure === "hostAddress" && webhook.publicAddress && !/^(\d{1,3}\.){3}\d{1,3}$/u.test(webhook.publicAddress)) {
+        return { path: ["webhook", "publicAddress"], issue: "must be this machine's public IPv4 address, which Telegram delivers to and the webhook intake binds alone: alasio init finds it" };
+    }
+    if (webhook.exposure !== "loadBalancer" && webhook.scaling.min > 1) {
+        return { path: ["webhook", "scaling"], issue: "must be 1 where the webhook intake binds its node's port, which one pod holds" };
+    }
     if (config.neon.enabled && !config.objectStore.bundled.enabled) {
         if (!config.objectStore.external.endpoint)
             return { path: ["objectStore", "external", "endpoint"], issue: "is required when objectStore.bundled.enabled is false" };
@@ -581,6 +698,26 @@ function completeness(config) {
             issue: `must be at least ${memoryText(NODE_AGENT_MEMORY_FLOOR)}: the node agent's own memory, and what a restore holds written and not yet on the disk`,
         };
     }
+    if (config.log.scaling.min === 2)
+        return { path: ["log", "scaling"], issue: "must be 1 or 3: two of KRaft's voters elect no leader once one is gone" };
+    if (memoryBytes(config.log.resources.limits["memory"] ?? "0") < memoryBytes(LOG_MEMORY)) {
+        return { path: ["log", "resources", "limits", "memory"], issue: `must be at least ${LOG_MEMORY}: a heap of 512 MiB, and the JVM's own` };
+    }
+    const backedUp = bundled.enabled && bundled.filerStore.backups.enabled ? filerStoreBackupHours(bundled.filerStore.backups) : null;
+    if (backedUp !== null && Number(config.log.retention.slice(0, -1)) < backedUp + LOG_RETENTION_MARGIN_HOURS) {
+        return {
+            path: ["log", "retention"],
+            issue: `must be at least ${backedUp + LOG_RETENTION_MARGIN_HOURS}h: the filer store's backups go back ${backedUp}h (objectStore.bundled.filerStore.backups), ` +
+                `a restore of the oldest loses the lake's telemetry written since, which the log refills only while it holds it, and a day more`,
+        };
+    }
+    if (telemetryRetentionBytes(config) < LOG_SEGMENT_BYTES) {
+        const least = Math.ceil((telemetryPartitions(config) * 2 * LOG_SEGMENT_BYTES * 4) / 3);
+        return {
+            path: ["log", "storage", "size"],
+            issue: `must be at least ${memoryText(least)}: each of the telemetry topics' ${telemetryPartitions(config)} partitions keeps a segment of ${memoryText(LOG_SEGMENT_BYTES)} at least beside the one it writes, in three quarters of it`,
+        };
+    }
     if (config.autoscaling.headroom.scaling.min > 0 && !config.autoscaling.preemption) {
         return { path: ["autoscaling", "headroom", "scaling"], issue: "must be 0 when autoscaling.preemption is false, as no pod takes a placeholder's place then" };
     }
@@ -592,6 +729,9 @@ const InstallStruct = Schema.Struct({
         agent: Image(IMAGES.agent),
         lake: Image(IMAGES.lake),
         grafana: Image(IMAGES.grafana),
+        log: Image(IMAGES.log),
+        collector: Image(IMAGES.collector),
+        webhook: Image(IMAGES.webhook),
         pullPolicy: defaulted(PullPolicy, "IfNotPresent"),
     }), {}),
     /** Pull Secrets for private registries, in alasio's namespace and the sessions and host ones. */
@@ -604,11 +744,36 @@ const InstallStruct = Schema.Struct({
     neon: defaulted(Neon, {}),
     objectStore: defaulted(ObjectStore, {}),
     workspaceStorage: defaulted(WorkspaceStorage, {}),
-    /** The analytics lake, loaded from Neon into DuckLake, and its query endpoint, which Grafana and alasio lake read it through. */
+    log: defaulted(Log, {}),
+    webhook: defaulted(Webhook, {}),
+    /**
+     * The analytics lake, in DuckLake: its loader, which loads it from Neon while alasio says
+     * it wrote transcripts and sleeps otherwise; its maintenance, main's, in passes on a
+     * schedule; its readers, main's, which Grafana and alasio lake read it through, scaled on
+     * the queries waiting on them, never below one; and its telemetry intake, which writes
+     * what the log holds of the stack's telemetry to it, scaled on how much is waiting there,
+     * to none while nothing is.
+     */
     lake: defaulted(Schema.Struct({
         enabled: defaulted(Schema.Boolean, true),
-        resources: Resources({ requests: { cpu: "100m", memory: "512Mi" }, limits: { memory: "1536Mi" } }),
-        query: defaulted(Schema.Struct({ resources: Resources({ requests: { cpu: "50m", memory: "128Mi" }, limits: { memory: "1Gi" } }) }), {}),
+        loader: defaulted(Schema.Struct({
+            /** None while nothing is left to load, which KEDA wakes; one, never two, as a load is not parallel. At one, it never sleeps, and needs no KEDA. */
+            scaling: Scaling({ min: 0, max: 1 }, { floor: false, scaled: true, most: 1 }),
+            resources: Resources({ requests: { cpu: "100m", memory: "512Mi" }, limits: { memory: "1536Mi" } }),
+        }), {}),
+        maintenance: defaulted(Schema.Struct({
+            /** When its daily pass runs, away from Neon's backup; the telemetry's files are merged hourly besides. */
+            schedule: defaulted(Schema.String.check(Schema.isMinLength(9, { message: "must be a cron schedule" })), "17 2 * * *"),
+            resources: Resources({ requests: { cpu: "50m", memory: "256Mi" }, limits: { memory: "1Gi" } }),
+        }), {}),
+        query: defaulted(Schema.Struct({
+            scaling: Scaling({ min: 1, max: 1 }, { floor: true, scaled: true }),
+            resources: Resources({ requests: { cpu: "50m", memory: "128Mi" }, limits: { memory: "1Gi" } }),
+        }), {}),
+        intake: defaulted(Schema.Struct({
+            scaling: Scaling({ min: 0, max: 2 }, { floor: false, scaled: true }),
+            resources: Resources({ requests: { cpu: "50m", memory: "256Mi" }, limits: { memory: "1Gi" } }),
+        }), {}),
     }), {}),
     /**
      * Grafana, with the lake: dashboards and alerts on it, alerting through the Telegram bot;
@@ -622,7 +787,6 @@ const InstallStruct = Schema.Struct({
     }), {}),
     /** NetworkPolicies confining sessions, folder workspaces' bayma and Neon. */
     networkPolicies: defaulted(Schema.Struct({ enabled: defaulted(Schema.Boolean, true) }), {}),
-    agentSandbox: defaulted(AgentSandbox, {}),
     autoscaling: defaulted(Autoscaling, {}),
 });
 /** The install configuration: what the config file holds, every key left out its default. */