runnix 0.4.0-rc.0

package/README.md

@@ -0,0 +1,48 @@
+# runnix
+
+Command-line tool for [Runnix](https://runnix.run), the PostgreSQL-native
+workflow orchestration platform: deploy runsets with their worker images,
+verify worker builds, inspect deploys, promote rollbacks.
+
+```bash
+npm install -g runnix      # or: npx runnix <command>
+```
+
+Node 22+. The CLI loads `runnix.config.ts` and your TypeScript function
+modules directly; your project needs no build step.
+
+## Commands
+
+| Command | What it does |
+| --- | --- |
+| `runnix deploy` | Discover functions, resolve runsets and post the manifests. `--image <ref>` (or `image` in `runnix.config.ts`) names the worker image; the digest is resolved from your own `docker` after the push. Records git and CI provenance on the deploy. |
+| `runnix verify` | Build/startup guard: checks a worker build carries exactly one runset's complete, current function set. `--offline` skips the control-plane comparison. |
+| `runnix deployments` | Current deployment per runset. `--history [n]` lists recent deploys with every runset each shipped. |
+| `runnix promote --to <deploymentId>` | Roll a runset back (or forward) by replaying a previous deployment's snapshot as a new one. |
+| `runnix init` | Scaffold a project. |
+| `runnix functions list`, `runnix test <id>` | Local discovery and execution without a control plane. |
+
+Remote commands read `RUNNIX_URL` and `RUNNIX_API_KEY` (a deploy-scoped key)
+from the environment, or take `--url`.
+
+## CI order
+
+```bash
+runnix verify --offline
+docker build -t ghcr.io/acme/billing:$SHA . && docker push ghcr.io/acme/billing:$SHA
+runnix deploy --image ghcr.io/acme/billing:$SHA --version $SHA
+runnix verify
+```
+
+Production-type environments refuse an image with no resolvable digest unless
+you pass `--allow-unpinned`.
+
+## Documentation
+
+- Runsets and deploys: https://runnix.run/docs/runsets
+- Self-hosted worker pools: https://runnix.run/docs/worker-pool
+
+## License
+
+AGPL-3.0-or-later. The SDK you import into your functions (`@runnix/sdk`) is
+Apache-2.0.

package/bin/runnix.mjs

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+// Runnix CLI entry. Registers tsx's ESM loader before loading the compiled
+// CLI so `runnix.config.ts` and the project's TypeScript function modules can
+// be imported directly - the user's project needs no build step and no
+// `--experimental-strip-types` (which cannot resolve extensionless imports).
+import { register } from 'tsx/esm/api'
+
+register()
+await import('../dist/main.js')

package/dist/deploy-logic.js

@@ -0,0 +1,92 @@
+/** Local check: every discovered function must resolve to `runset`. */
+export function checkSingleRunset(functions, runset) {
+    return functions
+        .filter((fn) => fn.runset !== runset)
+        .map((fn) => ({
+        kind: 'mixed-runset',
+        identifier: fn.definition.identifier,
+        detail: `resolves to runset "${fn.runset}" but this build is verified as "${runset}" (${fn.modulePath})`,
+    }));
+}
+/** Remote check: the build must match the runset's deployed manifest exactly. */
+export function compareAgainstManifest(local, deployed) {
+    const problems = [];
+    const localByIdentifier = new Map(local.map((fn) => [fn.identifier, fn.definitionHash]));
+    const deployedByIdentifier = new Map(deployed.map((fn) => [fn.identifier, fn.definitionHash]));
+    for (const [identifier, hash] of deployedByIdentifier) {
+        const localHash = localByIdentifier.get(identifier);
+        if (localHash === undefined) {
+            problems.push({
+                kind: 'missing',
+                identifier,
+                detail: 'deployed in this runset but absent from the build (partial image)',
+            });
+        }
+        else if (localHash !== hash) {
+            problems.push({
+                kind: 'hash-mismatch',
+                identifier,
+                detail: `build carries ${localHash.slice(0, 12)}, deployment expects ${hash.slice(0, 12)} (stale or unreleased build)`,
+            });
+        }
+    }
+    for (const identifier of localByIdentifier.keys()) {
+        if (!deployedByIdentifier.has(identifier)) {
+            problems.push({
+                kind: 'undeployed',
+                identifier,
+                detail: 'present in the build but not in the deployed manifest (deploy before shipping the image)',
+            });
+        }
+    }
+    return problems.sort((a, b) => a.identifier.localeCompare(b.identifier));
+}
+export function partitionByRunset(functions, owned) {
+    const byIdentifier = new Map();
+    const duplicates = new Map();
+    for (const fn of functions) {
+        const id = fn.definition.identifier;
+        const existing = byIdentifier.get(id);
+        if (!existing) {
+            byIdentifier.set(id, fn);
+            continue;
+        }
+        // Re-exports of the same build are harmless; different hashes are a bug.
+        if (existing.definitionHash !== fn.definitionHash || existing.runset !== fn.runset) {
+            const set = duplicates.get(id) ?? new Set([existing.modulePath]);
+            set.add(fn.modulePath);
+            duplicates.set(id, set);
+        }
+    }
+    const byRunset = new Map();
+    for (const fn of byIdentifier.values()) {
+        const list = byRunset.get(fn.runset) ?? [];
+        list.push(fn);
+        byRunset.set(fn.runset, list);
+    }
+    const body = {
+        runsets: [...byRunset.entries()]
+            .sort(([a], [b]) => a.localeCompare(b))
+            .map(([runset, fns]) => ({
+            runset,
+            functions: fns
+                .sort((a, b) => a.definition.identifier.localeCompare(b.definition.identifier))
+                .map((fn) => ({
+                definition: fn.definition,
+                definitionHash: fn.definitionHash,
+                region: fn.region,
+                requiredEnv: fn.requiredEnv,
+            })),
+        })),
+    };
+    if (owned && owned.length > 0)
+        body.owned = owned;
+    return {
+        body,
+        duplicates: [...duplicates.entries()].map(([identifier, modules]) => ({
+            identifier,
+            modules: [...modules].sort(),
+        })),
+    };
+}
+//# sourceMappingURL=deploy-logic.js.map

package/dist/deploy-logic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-logic.js","sourceRoot":"","sources":["../src/deploy-logic.ts"],"names":[],"mappings":"AAoDA,uEAAuE;AACvE,MAAM,UAAU,iBAAiB,CAAC,SAA+B,EAAE,MAAc;IAC/E,OAAO,SAAS;SACb,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC;SACpC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACZ,IAAI,EAAE,cAAuB;QAC7B,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU;QACpC,MAAM,EAAE,uBAAuB,EAAE,CAAC,MAAM,oCAAoC,MAAM,MAAM,EAAE,CAAC,UAAU,GAAG;KACzG,CAAC,CAAC,CAAA;AACP,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,sBAAsB,CACpC,KAAuD,EACvD,QAA0D;IAE1D,MAAM,QAAQ,GAAoB,EAAE,CAAA;IACpC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;IACxF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;IAE9F,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,oBAAoB,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,SAAS;gBACf,UAAU;gBACV,MAAM,EAAE,mEAAmE;aAC5E,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,eAAe;gBACrB,UAAU;gBACV,MAAM,EAAE,iBAAiB,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8BAA8B;aACvH,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,YAAY;gBAClB,UAAU;gBACV,MAAM,EAAE,0FAA0F;aACnG,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;AAC1E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAA+B,EAAE,KAAgB;IACjF,MAAM,YAAY,GAAG,IAAI,GAAG,EAA8B,CAAA;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAA;IACjD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAA;QACnC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YACxB,SAAQ;QACV,CAAC;QACD,yEAAyE;QACzE,IAAI,QAAQ,CAAC,cAAc,KAAK,EAAE,CAAC,cAAc,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC;YACnF,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAA;YAChE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAA;YACtB,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAA;IACxD,KAAK,MAAM,EAAE,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;QAC1C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACb,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC;IAED,MAAM,IAAI,GAAsB;QAC9B,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;aAC7B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,MAAM;YACN,SAAS,EAAE,GAAG;iBACX,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;iBAC9E,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACZ,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,cAAc,EAAE,EAAE,CAAC,cAAc;gBACjC,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,WAAW,EAAE,EAAE,CAAC,WAAW;aAC5B,CAAC,CAAC;SACN,CAAC,CAAC;KACN,CAAA;IACD,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IAEjD,OAAO;QACL,IAAI;QACJ,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YACpE,UAAU;YACV,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE;SAC7B,CAAC,CAAC;KACJ,CAAA;AACH,CAAC"}

package/dist/image-digest.js

@@ -0,0 +1,142 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { parseImageReference, sameRepository } from '@runnix/protocol';
+const execFileAsync = promisify(execFile);
+/** Image cascade (Decision #24): --image > runsets[x].image > config.image > none. */
+export function resolveImage(input) {
+    return input.flag ?? input.config.runsets?.[input.runset]?.image ?? input.config.image;
+}
+/**
+ * From `docker image inspect --format '{{json .RepoDigests}}'`: the digest
+ * for THIS repository - an image tagged into several repositories carries
+ * one RepoDigest per repository, and only the matching one is the pinned
+ * generation the pool will pull.
+ */
+export function pickRepoDigest(repoDigests, reference) {
+    for (const entry of repoDigests) {
+        const at = entry.indexOf('@');
+        if (at === -1)
+            continue;
+        if (sameRepository(entry.slice(0, at), reference))
+            return entry.slice(at + 1);
+    }
+    return undefined;
+}
+/**
+ * Resolve the pushed digest for a reference using the developer's local
+ * docker (their login - the control plane never touches a registry). First
+ * hit wins: an explicit digest, a digest in the reference, the local
+ * image's RepoDigests, then the registry via buildx imagetools. Undefined
+ * when nothing resolves (not built/pushed yet, or no docker at all).
+ */
+export async function resolveDigest(reference, explicit) {
+    if (explicit)
+        return explicit;
+    const parsed = parseImageReference(reference);
+    if (parsed?.digest)
+        return parsed.digest;
+    try {
+        const { stdout } = await execFileAsync('docker', [
+            'image',
+            'inspect',
+            '--format',
+            '{{json .RepoDigests}}',
+            reference,
+        ]);
+        const digest = pickRepoDigest(JSON.parse(stdout.trim()), reference);
+        if (digest)
+            return digest;
+    }
+    catch {
+        // Not local (or no docker): try the registry.
+    }
+    try {
+        const { stdout } = await execFileAsync('docker', [
+            'buildx',
+            'imagetools',
+            'inspect',
+            reference,
+            '--format',
+            '{{.Manifest.Digest}}',
+        ]);
+        const digest = stdout.trim();
+        if (/^sha256:[a-f0-9]{64}$/.test(digest))
+            return digest;
+    }
+    catch {
+        // Unreachable registry, or not pushed.
+    }
+    return undefined;
+}
+/** Short git SHA as the default deployment version label; undefined outside a repo. */
+export async function gitShortSha() {
+    try {
+        const { stdout } = await execFileAsync('git', ['rev-parse', '--short=12', 'HEAD']);
+        return stdout.trim() || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Strip embedded credentials from a remote URL (`https://user:token@host/...` is common in CI). */
+export function redactRemote(url) {
+    return url.replace(/^(\w+:\/\/)[^@/]+@/, '$1');
+}
+/**
+ * Best-effort git provenance for the deploy record (Decision #25): sha,
+ * branch, dirty flag, remote, subject line. Undefined outside a repository;
+ * every field beyond the sha is optional so a shallow CI checkout still
+ * yields a record.
+ */
+export async function gitMetadata(cwd = process.cwd()) {
+    const run = async (args) => (await execFileAsync('git', args, { cwd })).stdout.trim();
+    let sha;
+    try {
+        sha = await run(['rev-parse', 'HEAD']);
+    }
+    catch {
+        return undefined;
+    }
+    if (!/^[0-9a-f]{7,64}$/.test(sha))
+        return undefined;
+    const out = { sha };
+    const ignore = () => { };
+    await Promise.all([
+        run(['rev-parse', '--abbrev-ref', 'HEAD']).then((branch) => {
+            if (branch && branch !== 'HEAD')
+                out.branch = branch.slice(0, 200);
+        }, ignore),
+        run(['status', '--porcelain']).then((status) => {
+            out.dirty = status.length > 0;
+        }, ignore),
+        run(['remote', 'get-url', 'origin']).then((remote) => {
+            if (remote)
+                out.remote = redactRemote(remote).slice(0, 300);
+        }, ignore),
+        run(['log', '-1', '--pretty=%s']).then((message) => {
+            if (message)
+                out.message = message.slice(0, 200);
+        }, ignore),
+    ]);
+    return out;
+}
+/** CI run provenance from the well-known environment variables; undefined outside CI. */
+export function ciMetadata(env = process.env) {
+    const withUrl = (provider, runUrl) => runUrl ? { provider, runUrl: runUrl.slice(0, 500) } : { provider };
+    if (env.GITHUB_ACTIONS === 'true') {
+        const runUrl = env.GITHUB_SERVER_URL && env.GITHUB_REPOSITORY && env.GITHUB_RUN_ID
+            ? `${env.GITHUB_SERVER_URL}/${env.GITHUB_REPOSITORY}/actions/runs/${env.GITHUB_RUN_ID}`
+            : undefined;
+        return withUrl('github', runUrl);
+    }
+    if (env.GITLAB_CI === 'true')
+        return withUrl('gitlab', env.CI_JOB_URL);
+    if (env.CIRCLECI === 'true')
+        return withUrl('circleci', env.CIRCLE_BUILD_URL);
+    if (env.BUILDKITE === 'true')
+        return withUrl('buildkite', env.BUILDKITE_BUILD_URL);
+    if (env.CI)
+        return { provider: 'ci' };
+    return undefined;
+}
+//# sourceMappingURL=image-digest.js.map

package/dist/image-digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-digest.js","sourceRoot":"","sources":["../src/image-digest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAGtE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;AAEzC,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,KAA8D;IACzF,OAAO,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAA;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,WAAqB,EAAE,SAAiB;IACrE,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAQ;QACvB,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB,EAAE,QAAiB;IACtE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAC7C,IAAI,MAAM,EAAE,MAAM;QAAE,OAAO,MAAM,CAAC,MAAM,CAAA;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE;YAC/C,OAAO;YACP,SAAS;YACT,UAAU;YACV,uBAAuB;YACvB,SAAS;SACV,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAa,EAAE,SAAS,CAAC,CAAA;QAC/E,IAAI,MAAM;YAAE,OAAO,MAAM,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE;YAC/C,QAAQ;YACR,YAAY;YACZ,SAAS;YACT,SAAS;YACT,UAAU;YACV,sBAAsB;SACvB,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;QAC5B,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;QAClF,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAUD,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAA;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACnD,MAAM,GAAG,GAAG,KAAK,EAAE,IAAc,EAAE,EAAE,CAAC,CAAC,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAC/F,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACnD,MAAM,GAAG,GAAgB,EAAE,GAAG,EAAE,CAAA;IAChC,MAAM,MAAM,GAAG,GAAG,EAAE,GAAE,CAAC,CAAA;IACvB,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACzD,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM;gBAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACpE,CAAC,EAAE,MAAM,CAAC;QACV,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7C,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;QAC/B,CAAC,EAAE,MAAM,CAAC;QACV,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACnD,IAAI,MAAM;gBAAE,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAC7D,CAAC,EAAE,MAAM,CAAC;QACV,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACjD,IAAI,OAAO;gBAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAClD,CAAC,EAAE,MAAM,CAAC;KACX,CAAC,CAAA;IACF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,MAAe,EAAE,EAAE,CACpD,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAA;IACpE,IAAI,GAAG,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,MAAM,GACV,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,aAAa;YACjE,CAAC,CAAC,GAAG,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,iBAAiB,GAAG,CAAC,aAAa,EAAE;YACvF,CAAC,CAAC,SAAS,CAAA;QACf,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;IACtE,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC7E,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAA;IAClF,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACrC,OAAO,SAAS,CAAA;AAClB,CAAC"}