Report if an image already pulled (#52 )

Proper documentation (#49 )
* WIP proper docs * Update README.md * wip * More updates * Apply suggestions from code review Co-authored-by: Nikolay Edigaryev <edigaryev@gmail.com> * Use GitHub Packages links * Promote Cirrus CLI first and then mentioned Cirrus CI * Apply suggestions from code review Co-authored-by: Nikolay Edigaryev <edigaryev@gmail.com> Co-authored-by: Nikolay Edigaryev <edigaryev@gmail.com>
2026-10-02 04:01:12 +02:00 · 2022-05-06 17:06:28 -04:00 · 2022-05-06 23:59:33 +03:00 · 2022-05-06 14:19:27 -04:00 · 2022-05-06 20:38:56 +03:00 · 2022-05-06 20:30:04 +03:00
250 changed files with 3152 additions and 77217 deletions
@@ -0,0 +1,24 @@
+persistent_worker:
+  labels:
+    os: darwin
+    arch: arm64
+
+task:
+  name: Test
+  test_script: swift test
+
+task:
+  name: Build
+  only_if: $CIRRUS_TAG == ''
+  build_script: swift build --product tart
+  sign_script: codesign --sign - --entitlements Resources/tart.entitlements --force .build/debug/tart
+  binary_artifacts:
+    path: .build/debug/tart
+
+task:
+  name: Release
+  only_if: $CIRRUS_TAG != ''
+  env:
+    GITHUB_TOKEN: ENCRYPTED[!98ace8259c6024da912c14d5a3c5c6aac186890a8d4819fad78f3e0c41a4e0cd3a2537dd6e91493952fb056fa434be7c!]
+    GORELEASER_KEY: ENCRYPTED[!9b80b6ef684ceaf40edd4c7af93014ee156c8aba7e6e5795f41c482729887b5c31f36b651491d790f1f668670888d9fd!]
+  release_script: goreleaser
@@ -0,0 +1,6 @@
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+insert_final_newline = true
@@ -0,0 +1 @@
+*.png filter=lfs diff=lfs merge=lfs -text
@@ -0,0 +1,15 @@
+# Xcode's user settings
+xcuserdata/
+tart.xcodeproj/
+
+# SwiftPM
+.swiftpm/
+
+# AppCode
+.idea/
+
+# Swift
+.build/
+
+# GoReleaser
+dist/
@@ -0,0 +1,40 @@
+project_name: tart
+
+builds:
+  - builder: prebuilt
+    goos:
+      - darwin
+    goarch:
+      - arm64
+    prebuilt:
+      path: .build/{{ .Arch }}-apple-macosx/release/tart
+
+before:
+  hooks:
+    - swift build -c release --product tart
+    
+after:
+  hooks:
+    - codesign --sign - --entitlements Resources/tart.entitlements --force .build/arm64-apple-macosx/release/tart
+
+archives:
+  - id: binary
+    format: binary
+    name_template: "{{ .ProjectName }}"
+  - id: regular
+    name_template: "{{ .ProjectName }}"
+
+release:
+  prerelease: auto
+
+brews:
+  - name: tart
+    ids:
+      - regular
+    tap:
+      owner: cirruslabs
+      name: homebrew-cli
+    caveats: See the Github repository for more information
+    homepage: https://github.com/cirruslabs/tart
+    description: Run macOS VMs on Apple Silicon
+    skip_upload: auto
@@ -0,0 +1,17 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="sign debug" type="ShConfigurationType">
+    <option name="SCRIPT_TEXT" value="codesign --sign - --entitlements Resources/tart.entitlements --force .build/debug/tart" />
+    <option name="INDEPENDENT_SCRIPT_PATH" value="true" />
+    <option name="SCRIPT_PATH" value="$PROJECT_DIR$/scripts/sign.sh" />
+    <option name="SCRIPT_OPTIONS" value="" />
+    <option name="INDEPENDENT_SCRIPT_WORKING_DIRECTORY" value="true" />
+    <option name="SCRIPT_WORKING_DIRECTORY" value="$PROJECT_DIR$" />
+    <option name="INDEPENDENT_INTERPRETER_PATH" value="true" />
+    <option name="INTERPRETER_PATH" value="/bin/zsh" />
+    <option name="INTERPRETER_OPTIONS" value="" />
+    <option name="EXECUTE_IN_TERMINAL" value="true" />
+    <option name="EXECUTE_SCRIPT_FILE" value="false" />
+    <envs />
+    <method v="2" />
+  </configuration>
+</component>
@@ -0,0 +1,8 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="tart create" type="SwiftPackageManagerRunConfiguration" factoryName="Swift Package Run" PROGRAM_PARAMS="create latest --from-ipsw=latest" REDIRECT_INPUT="false" ELEVATE="false" USE_EXTERNAL_CONSOLE="false" PASS_PARENT_ENVS_2="true" PROJECT_NAME="tart" TARGET_NAME="tart" CONFIG_NAME="tart" RUN_TARGET_PROJECT_NAME="tart" RUN_TARGET_NAME="tart" WAS_MODIFIED="">
+    <method v="2">
+      <option name="SPM.BUILD_TASK_PROVIDER" enabled="true" />
+      <option name="RunConfigurationTask" enabled="true" run_configuration_name="sign debug" run_configuration_type="ShConfigurationType" />
+    </method>
+  </configuration>
+</component>
@@ -0,0 +1,8 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="tart run" type="SwiftPackageManagerRunConfiguration" factoryName="Swift Package Run" PROGRAM_PARAMS="run latest" REDIRECT_INPUT="false" ELEVATE="false" USE_EXTERNAL_CONSOLE="false" PASS_PARENT_ENVS_2="true" PROJECT_NAME="tart" TARGET_NAME="tart" CONFIG_NAME="tart" RUN_TARGET_PROJECT_NAME="tart" RUN_TARGET_NAME="tart" WAS_MODIFIED="">
+    <method v="2">
+      <option name="SPM.BUILD_TASK_PROVIDER" enabled="true" />
+      <option name="RunConfigurationTask" enabled="true" run_configuration_name="sign debug" run_configuration_type="ShConfigurationType" />
+    </method>
+  </configuration>
+</component>
@@ -1,2 +0,0 @@
-tart.run
-www.tart.run
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published
+    by the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<https://www.gnu.org/licenses/>.
@@ -0,0 +1,41 @@
+{
+  "pins" : [
+    {
+      "identity" : "swift-argument-parser",
+      "kind" : "remoteSourceControl",
+      "location" : "https://github.com/apple/swift-argument-parser",
+      "state" : {
+        "revision" : "f3c9084a71ef4376f2fabbdf1d3d90a49f1fabdb",
+        "version" : "1.1.2"
+      }
+    },
+    {
+      "identity" : "swift-case-paths",
+      "kind" : "remoteSourceControl",
+      "location" : "https://github.com/pointfreeco/swift-case-paths",
+      "state" : {
+        "revision" : "ce9c0d897db8a840c39de64caaa9b60119cf4be8",
+        "version" : "0.8.1"
+      }
+    },
+    {
+      "identity" : "swift-parsing",
+      "kind" : "remoteSourceControl",
+      "location" : "https://github.com/pointfreeco/swift-parsing",
+      "state" : {
+        "revision" : "28d32e9ace1c4c43f5e5a177be837a202494c2d5",
+        "version" : "0.9.2"
+      }
+    },
+    {
+      "identity" : "xctest-dynamic-overlay",
+      "kind" : "remoteSourceControl",
+      "location" : "https://github.com/pointfreeco/xctest-dynamic-overlay",
+      "state" : {
+        "revision" : "50a70a9d3583fe228ce672e8923010c8df2deddd",
+        "version" : "0.2.1"
+      }
+    }
+  ],
+  "version" : 2
+}
@@ -0,0 +1,24 @@
+// swift-tools-version:5.6
+
+import PackageDescription
+
+let package = Package(
+  name: "Tart",
+  platforms: [
+    .macOS(.v12)
+  ],
+  products: [
+    .executable(name: "tart", targets: ["tart"])
+  ],
+  dependencies: [
+    .package(url: "https://github.com/apple/swift-argument-parser", from: "1.1.2"),
+    .package(url: "https://github.com/pointfreeco/swift-parsing", from: "0.9.2"),
+  ],
+  targets: [
+    .executableTarget(name: "tart", dependencies: [
+      .product(name: "ArgumentParser", package: "swift-argument-parser"),
+      .product(name: "Parsing", package: "swift-parsing"),
+    ]),
+    .testTarget(name: "TartTests", dependencies: ["tart"])
+  ]
+)
@@ -0,0 +1,154 @@
+![tart VM view app](Resources/TartScreenshot.png)
+
+*Tart* is a virtualization toolset to build, run and manage virtual machines on Apple Silicon.
+Built by CI engineers for your automation needs. Here are some highlights of Tart:
+
+* Tart uses Apple's own `Virtualization.Framework` for near-native performance.
+* Push/Pull virtual machines from any OCI-compatible container registry.
+* Use Tart Packer Plugin to automate VM creation.
+* Built-in CI integration.
+
+Try running a Tart VM on your Apple Silicon device (will download a 25 GB image):
+
+```shell
+brew install cirruslabs/cli/tart
+tart clone ghcr.io/cirruslabs/macos-monterey-base:latest monterey-base
+tart run monterey-base
+```
+
+## CI Integration
+
+[Cirrus CLI](https://github.com/cirruslabs/cirrus-cli) is an open-sourced CI-agnostic tool that can run workloads
+inside containers via Docker or Podman and now inside macOS VMs via Tart. Put the following `.cirrus.yml` file
+in the root of your repository:
+
+```yaml
+task:
+  name: hello
+  macos_instance:
+    # can be a remote or a local virtual machine
+    image: ghcr.io/cirruslabs/macos-monterey-base:latest
+  script: echo "Hello from within a Tart VM!"
+```
+
+Run it locally or in CI with the following command:
+
+```shell
+brew install cirruslabs/cli/cirrus
+cirrus run
+```
+
+[Cirrus CI](https://cirrus-ci.org/) already leverages Tart to power its macOS cloud infrastructure. The `.cirrus.yml`
+config from above will just work in Cirrus CI and your tasks will be executed inside Tart VMs in our cloud.
+
+**Note:** Cirrus CI only allows [images managed and regularly updated by us](https://github.com/orgs/cirruslabs/packages?tab=packages&q=macos).
+
+## Virtual Machine Management
+
+### Creating from scratch
+
+Tart can create VMs from `*.ipsw` files. You can download a specific `*.ipsw` file [here](https://ipsw.me/) or you can
+use `latest` instead of a path to `*.ipsw` to download the latest available version:
+
+```shell
+tart create --from-ipsw=latest monterey-vanilla
+tart run monterey-vanilla
+```
+
+After the initial booting of the VM you'll need to manually go through the macOS installation process. As a convention we recommend creating an `admin` user with an `admin` password. After the regular installation please do some additional modifications in the VM:
+
+1. Enable Auto-Login. Users & Groups -> Login Options -> Automatic login -> admin.
+2. Allow SSH. Sharing -> Remote Login
+3. Disable Lock Screen. Preferences -> Lock Screen -> disable "Require Password" after 5.
+4. Disable Screen Saver.
+5. Run `sudo visudo` in Terminal, find `%admin ALL=(ALL) ALL` add `admin ALL=(ALL) NOPASSWD: ALL` to allow sudo without a password.
+
+### Configuring a VM
+
+By default, a tart VM uses 2 CPUs and 4 GB of memory with a `1024x768` display. This can be changed with `tart set` command.
+Please refer to `tart set --help` for additional details.
+
+### Building with Packer
+
+Please refer to [Tart Packer Plugin reposiotry](https://github.com/cirruslabs/packer-plugin-tart) for setup instructions.
+Here is an example of a template to build `monterey-base` local image based of a remote image:
+
+```json
+{
+  "builders": [
+    {
+      "name": "tart",
+      "type": "tart-cli",
+      "vm_base_name": "tartvm/vanilla:latest",
+      "vm_name": "monterey-base",
+      "cpu_count": 4,
+      "memory_gb": 8,
+      "disk_size_gb": 32,
+      "ssh_username": "admin",
+      "ssh_password": "admin",
+      "ssh_timeout": "120s"
+    }
+  ],
+  "provisioners": [
+    {
+      "inline": [
+        "echo 'Disabling spotlight indexing...'",
+        "sudo mdutil -a -i off"
+      ],
+      "type": "shell"
+    },
+    # more provisioners
+  ]
+}
+```
+
+Here is a [repository with Packer templates](https://github.com/cirruslabs/macos-image-templates) used to build [all the images managed by us](https://github.com/orgs/cirruslabs/packages?tab=packages&q=macos).
+
+### Working with a Remote OCI Container Registry
+
+For example, let's say you want to push/pull images to a registry hosted at https://acme.io/.
+
+#### Registry Authorization
+
+First, you need to log in and save credential for `acme.io` host via `tart login` command:
+
+```shell
+tart login acme.io
+```
+
+Credentials are securely stored in Keychain.
+
+#### Pushing a Local Image
+
+Once credentials are saved for `acme.io`, run the following command to push a local images remotely with two tags:
+
+```shell
+tart push my-local-vm-name acme.io/remoteorg/name:latest acme.io/remoteorg/name:v1.0.0
+```
+
+#### Pulling a Remote Image
+
+```shell
+tart pull acme.io/remoteorg/name:latest my-local-vm-name
+```
+
+## FAQ
+
+<details>
+  <summary>How Tart is different from Anka</summary>
+
+  Under the hood Tart is using the same technology as Anka 3.0 so there should be no real difference in performance
+  or features supported. If there is some feature missing please don't hesitate to [create a feature request](https://github.com/cirruslabs/tart/issues).
+
+  Instead of Anka Registry, Tart can work with any OCI-compatible container registry.
+
+  Tart doesn't yet have an analogue of Anka Controller for managing long living VMs. Please take a look at [CI integration](#ci-integration)
+  section for an option to run ephemeral VMs for your needs.
+</details>
+
+<details>
+  <summary>Why Tart is free and open sourced?</summary>
+
+  Tart is a relatively small project, and it didn't feel right to try to monetize it.
+  Apple did all the heavy lifting with their `Virtualization.Framework`.
+</details>
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8dd6af1a08bbcdc4faf0ff53601b38136c90231e11bd81bc8cd477d6f1c7d3f2
+size 209404
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:46046004d63f9b4b7de3d5d3f9ca14367a9e4b0a124b4b0b65225f67a0d0fb45
+size 1266887
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.virtualization</key>
+	<true/>
+</dict>
+</plist>
@@ -0,0 +1,119 @@
+import Foundation
+import Network
+import Virtualization
+
+struct ARPCommandFailedError: Error, CustomStringConvertible {
+  var terminationReason: Process.TerminationReason
+  var terminationStatus: Int32
+
+  var description: String {
+    var reason: String
+
+    switch terminationReason {
+    case .exit:
+      reason = "exit code \(terminationStatus)"
+    case .uncaughtSignal:
+      reason = "uncaught signal"
+    default:
+      reason = "unknown reason"
+    }
+
+    return "arp command failed: \(reason)"
+  }
+}
+
+struct ARPCommandYieldedInvalidOutputError: Error, CustomStringConvertible {
+  var explanation: String
+
+  var description: String {
+    "arp command yielded invalid output: \(explanation)"
+  }
+}
+
+struct ARPCacheInternalError: Error, CustomStringConvertible {
+  var explanation: String
+
+  var description: String {
+    "ARPCache internal error: \(explanation)"
+  }
+}
+
+struct ARPCache {
+  static func ResolveMACAddress(macAddress: MACAddress, bridgeOnly: Bool = true) throws -> IPv4Address? {
+    let process = Process.init()
+    process.executableURL = URL.init(fileURLWithPath: "/usr/sbin/arp")
+    process.arguments = ["-an"]
+
+    let pipe = Pipe()
+    process.standardOutput = pipe
+    process.standardError = pipe
+    process.standardInput = FileHandle.nullDevice
+
+    try process.run()
+    process.waitUntilExit()
+
+    if !(process.terminationReason == .exit && process.terminationStatus == 0) {
+      throw ARPCommandFailedError(
+        terminationReason: process.terminationReason,
+        terminationStatus: process.terminationStatus)
+    }
+
+    guard let rawLines = try pipe.fileHandleForReading.readToEnd() else {
+      throw ARPCommandYieldedInvalidOutputError(explanation: "empty output")
+    }
+    let lines = String(decoding: rawLines, as: UTF8.self)
+            .trimmingCharacters(in: .whitespacesAndNewlines)
+            .components(separatedBy: "\n")
+
+    // Based on https://opensource.apple.com/source/network_cmds/network_cmds-606.40.2/arp.tproj/arp.c.auto.html
+    let regex = try NSRegularExpression(pattern: #"^.* \((?<ip>.*)\) at (?<mac>.*) on (?<interface>.*) .*$"#)
+
+    for line in lines {
+      let nsLineRange = NSRange(line.startIndex..<line.endIndex, in: line)
+
+      guard let match = regex.firstMatch(in: line, range: nsLineRange) else {
+        throw ARPCommandYieldedInvalidOutputError(explanation: "unparseable entry \"\(line)\"")
+      }
+
+      let rawIP = try match.getCaptureGroup(name: "ip", for: line)
+      guard let ip = IPv4Address(rawIP) else {
+        throw ARPCommandYieldedInvalidOutputError(explanation: "failed to parse IPv4 address \(rawIP)")
+      }
+
+      let rawMAC = try match.getCaptureGroup(name: "mac", for: line)
+      if rawMAC == "(incomplete)" {
+        continue
+      }
+      guard let mac = MACAddress(fromString: rawMAC) else {
+        throw ARPCommandYieldedInvalidOutputError(explanation: "failed to parse MAC address \(rawMAC)")
+      }
+
+      let interface = try match.getCaptureGroup(name: "interface", for: line)
+      if bridgeOnly && !interface.starts(with: "bridge") {
+        continue
+      }
+
+      if macAddress == mac {
+        return ip
+      }
+    }
+
+    return nil
+  }
+}
+
+extension NSTextCheckingResult {
+  func getCaptureGroup(name: String, for string: String) throws -> String {
+    let nsRange = self.range(withName: name)
+
+    if nsRange.location == NSNotFound {
+      throw ARPCacheInternalError(explanation: "attempted to retrieve non-existent named capture group \(name)")
+    }
+
+    guard let range = Range.init(nsRange, in: string) else {
+      throw ARPCacheInternalError(explanation: "failed to convert NSRange to Range")
+    }
+
+    return String(string[range])
+  }
+}
@@ -0,0 +1,21 @@
+import Foundation
+
+struct MACAddress: Equatable, CustomStringConvertible {
+  var mac: [UInt8] = Array(repeating: 0, count: 6)
+
+  init?(fromString: String) {
+    let components = fromString.components(separatedBy: ":")
+
+    if components.count != 6 {
+      return nil
+    }
+
+    for (index, component) in components.enumerated() {
+      mac[index] = UInt8(component, radix: 16)!
+    }
+  }
+
+  var description: String {
+    return String(format: "%02x:%02x:%02x:%02x:%02x:%02x", mac[0], mac[1], mac[2], mac[3], mac[4], mac[5])
+  }
+}
@@ -0,0 +1,50 @@
+import ArgumentParser
+import Foundation
+import SystemConfiguration
+
+struct Clone: AsyncParsableCommand {
+  static var configuration = CommandConfiguration(abstract: "Clone a VM")
+
+  @Argument(help: "source VM name")
+  var sourceName: String
+
+  @Argument(help: "new VM name")
+  var newName: String
+
+  func run() async throws {
+    do {
+      if let remoteName = try? RemoteName(sourceName) {
+        if !VMStorageOCI().exists(remoteName) {
+          // Pull the VM in case it's OCI-based and doesn't exist locally yet
+          let registry = try Registry(host: remoteName.host, namespace: remoteName.namespace)
+          try await VMStorageOCI().pull(remoteName, registry: registry)
+        }
+        let remoteVM = try VMStorageHelper.open(sourceName)
+
+        let remoteConfig = try VMConfig.init(fromURL: remoteVM.configURL)
+        let needToGenerateNewMAC = try localVMExistsWith(macAddress: remoteConfig.macAddress.string)
+
+        try remoteVM.clone(to: VMStorageLocal().create(newName), generateMAC: needToGenerateNewMAC)
+      } else {
+        try VMStorageHelper.open(sourceName).clone(to: VMStorageLocal().create(newName), generateMAC: true)
+      }
+
+      Foundation.exit(0)
+    } catch {
+      print(error)
+
+      Foundation.exit(1)
+    }
+  }
+
+  private func localVMExistsWith(macAddress: String) throws -> Bool {
+    var needToGenerateNewMAC = false
+    for (_, localDir) in try VMStorageLocal().list() {
+      let localConfig = try VMConfig.init(fromURL: localDir.configURL)
+      if localConfig.macAddress.string == macAddress {
+        needToGenerateNewMAC = true
+      }
+    }
+    return needToGenerateNewMAC
+  }
+}
@@ -0,0 +1,41 @@
+import ArgumentParser
+import Dispatch
+import SwiftUI
+import Foundation
+
+struct Create: AsyncParsableCommand {
+  static var configuration = CommandConfiguration(abstract: "Create a VM")
+
+  @Argument(help: "VM name")
+  var name: String
+
+  @Option(help: ArgumentHelp("Path to the IPSW file (or \"latest\") to fetch the latest appropriate IPSW", valueName: "path")) 
+  var fromIPSW: String?
+
+  @Option(help: ArgumentHelp("Disk size in Gb")) 
+  var diskSize: UInt8 = 32
+
+  func validate() throws {
+    if fromIPSW == nil {
+      throw ValidationError("Please specify a --from-ipsw option!")
+    }
+  }
+
+  func run() async throws {
+    do {
+      let vmDir = try VMStorageLocal().create(name)
+
+      if fromIPSW! == "latest" {
+        _ = try await VM(vmDir: vmDir, ipswURL: nil, diskSizeGB: diskSize)
+      } else {
+        _ = try await VM(vmDir: vmDir, ipswURL: URL(fileURLWithPath: fromIPSW!), diskSizeGB: diskSize)
+      }
+
+      Foundation.exit(0)
+    } catch {
+      print(error)
+
+      Foundation.exit(1)
+    }
+  }
+}
@@ -0,0 +1,22 @@
+import ArgumentParser
+import Dispatch
+import SwiftUI
+
+struct Delete: AsyncParsableCommand {
+  static var configuration = CommandConfiguration(abstract: "Delete a VM")
+
+  @Argument(help: "VM name")
+  var name: String
+
+  func run() async throws {
+    do {
+      try VMStorageHelper.delete(name)
+
+      Foundation.exit(0)
+    } catch {
+      print(error)
+
+      Foundation.exit(1)
+    }
+  }
+}
@@ -0,0 +1,50 @@
+import ArgumentParser
+import Foundation
+import Network
+import SystemConfiguration
+
+struct IP: AsyncParsableCommand {
+  static var configuration = CommandConfiguration(abstract: "Get VM's IP address")
+
+  @Argument(help: "VM name")
+  var name: String
+
+  @Option(help: "Number of seconds to wait for a potential VM booting")
+  var wait: UInt16 = 0
+
+  func run() async throws {
+    do {
+      let vmDir = try VMStorageLocal().open(name)
+      let vmConfig = try VMConfig.init(fromURL: vmDir.configURL)
+
+      guard let ip = try await resolveIP(vmConfig, secondsToWait: wait) else {
+        print("no IP address found, is your VM running?")
+
+        Foundation.exit(1)
+      }
+
+      print(ip)
+
+      Foundation.exit(0)
+    } catch {
+      print(error)
+
+      Foundation.exit(1)
+    }
+  }
+
+  private func resolveIP(_ config: VMConfig, secondsToWait: UInt16) async throws -> IPv4Address? {
+    let waitUntil = Calendar.current.date(byAdding: .second, value: Int(secondsToWait), to: Date.now)!
+    let vmMacAddress = MACAddress(fromString: config.macAddress.string)!
+
+    repeat {
+      if let ip = try ARPCache.ResolveMACAddress(macAddress: vmMacAddress) {
+        return ip
+      }
+
+      try await Task.sleep(nanoseconds: 1_000_000)
+    } while Date.now < waitUntil
+
+    return nil
+  }
+}
@@ -0,0 +1,28 @@
+import ArgumentParser
+import Dispatch
+import SwiftUI
+
+struct List: AsyncParsableCommand {
+  static var configuration = CommandConfiguration(abstract: "List created VMs")
+
+  func run() async throws {
+    do {
+      print("Name\tSource")
+
+      displayTable("local", try VMStorageLocal().list())
+      displayTable("oci", try VMStorageOCI().list())
+
+      Foundation.exit(0)
+    } catch {
+      print(error)
+
+      Foundation.exit(1)
+    }
+  }
+
+  private func displayTable(_ source: String, _ vms: [(String, VMDirectory)]) {
+    for (name, _) in vms {
+      print("\(source)\t\(name)")
+    }
+  }
+}
@@ -0,0 +1,24 @@
+import ArgumentParser
+import Dispatch
+import SwiftUI
+
+struct Login: AsyncParsableCommand {
+  static var configuration = CommandConfiguration(abstract: "Login to a registry")
+
+  @Argument(help: "host")
+  var host: String
+
+  func run() async throws {
+    do {
+      let (user, password) = try Credentials.retrieveStdin()
+
+      try Credentials.store(host: host, user: user, password: password)
+
+      Foundation.exit(0)
+    } catch {
+      print(error)
+
+      Foundation.exit(1)
+    }
+  }
+}
@@ -0,0 +1,27 @@
+import ArgumentParser
+import Dispatch
+import SwiftUI
+
+struct Pull: AsyncParsableCommand {
+  static var configuration = CommandConfiguration(abstract: "Pull a VM from a registry")
+
+  @Argument(help: "remote VM name")
+  var remoteName: String
+
+  func run() async throws {
+    do {
+      let remoteName = try RemoteName(remoteName)
+      let registry = try Registry(host: remoteName.host, namespace: remoteName.namespace)
+
+      defaultLogger.appendNewLine("pulling \(remoteName)...")
+
+      try await VMStorageOCI().pull(remoteName, registry: registry)
+
+      Foundation.exit(0)
+    } catch {
+      print(error)
+
+      Foundation.exit(1)
+    }
+  }
+}
@@ -0,0 +1,53 @@
+import ArgumentParser
+import Dispatch
+import Foundation
+import Compression
+
+struct Push: AsyncParsableCommand {
+  static var configuration = CommandConfiguration(abstract: "Push a VM to a registry")
+
+  @Argument(help: "local VM name")
+  var localName: String
+
+  @Argument(help: "remote VM name(s)")
+  var remoteNames: [String]
+
+  func run() async throws {
+    do {
+      let localVMDir = try VMStorageLocal().open(localName)
+
+      // Parse remote names supplied by the user
+      let remoteNames = try remoteNames.map{
+        try RemoteName($0)
+      }
+
+      // Group remote names by registry
+      struct RegistryIdentifier: Hashable, Equatable {
+        var host: String
+        var namespace: String
+      }
+
+      let registryGroups = Dictionary(grouping: remoteNames, by: {
+        RegistryIdentifier(host: $0.host, namespace: $0.namespace)
+      })
+
+      // Push VM
+      for (registryIdentifier, remoteNamesForRegistry) in registryGroups {
+        let registry = try Registry(host: registryIdentifier.host, namespace: registryIdentifier.namespace)
+
+        let listOfTagsAndDigests = "{" + remoteNamesForRegistry.map{$0.fullyQualifiedReference }
+                .joined(separator: ",") + "}"
+        defaultLogger.appendNewLine("pushing \(localName) to "
+          + "\(registryIdentifier.host)/\(registryIdentifier.namespace)\(listOfTagsAndDigests)...")
+
+        try await localVMDir.pushToRegistry(registry: registry, references: remoteNamesForRegistry.map{ $0.reference })
+      }
+
+      Foundation.exit(0)
+    } catch {
+      print(error)
+
+      Foundation.exit(1)
+    }
+  }
+}
@@ -0,0 +1,82 @@
+import ArgumentParser
+import Dispatch
+import SwiftUI
+import Virtualization
+
+var vm: VM?
+
+struct Run: AsyncParsableCommand {
+  static var configuration = CommandConfiguration(abstract: "Run a VM")
+
+  @Argument(help: "VM name")
+  var name: String
+
+  @Flag var noGraphics: Bool = false
+
+  @MainActor
+  func run() async throws {
+    let vmDir = try VMStorageLocal().open(name)
+    vm = try VM(vmDir: vmDir)
+
+    Task {
+      do {
+        try await vm!.run()
+
+        Foundation.exit(0)
+      } catch {
+        print(error)
+
+        Foundation.exit(1)
+      }
+    }
+
+    if noGraphics {
+      dispatchMain()
+    } else {
+      // UI mumbo-jumbo
+      let nsApp = NSApplication.shared
+      nsApp.setActivationPolicy(.regular)
+      nsApp.activate(ignoringOtherApps: true)
+
+      nsApp.applicationIconImage = NSImage(data: AppIconData)
+
+      struct MainApp: App {
+        var body: some Scene {
+          WindowGroup(vm!.name) {
+            Group {
+              VMView(vm: vm!).onAppear {
+                NSWindow.allowsAutomaticWindowTabbing = false
+              }
+            }.frame(width: CGFloat(vm!.config.display.width), height: CGFloat(vm!.config.display.height))
+          }.commands {
+            // Remove some standard menu options
+            CommandGroup(replacing: .help, addition: {})
+            CommandGroup(replacing: .newItem, addition: {})
+            CommandGroup(replacing: .pasteboard, addition: {})
+            CommandGroup(replacing: .textEditing, addition: {})
+            CommandGroup(replacing: .undoRedo, addition: {})
+            CommandGroup(replacing: .windowSize, addition: {})
+          }
+        }
+      }
+
+      MainApp.main()
+    }
+  }
+}
+
+struct VMView: NSViewRepresentable {
+  typealias NSViewType = VZVirtualMachineView
+
+  @ObservedObject var vm: VM
+
+  func makeNSView(context: Context) -> NSViewType {
+    let machineView = VZVirtualMachineView()
+    machineView.capturesSystemKeys = true
+    return machineView
+  }
+
+  func updateNSView(_ nsView: NSViewType, context: Context) {
+    nsView.virtualMachine = vm.virtualMachine
+  }
+}
@@ -0,0 +1,73 @@
+import ArgumentParser
+import Foundation
+
+struct Set: AsyncParsableCommand {
+  static var configuration = CommandConfiguration(abstract: "Modify VM's configuration")
+
+  @Argument(help: "VM name")
+  var name: String
+
+  @Option(help: "Number of VM CPUs")
+  var cpu: UInt16?
+
+  @Option(help: "VM memory size in megabytes")
+  var memory: UInt16?
+
+  @Option(help: "VM display settings in a format of <width>x<height>(x<dpi>)?. For example, 1200x800 or 1200x800x72")
+  var display: VMDisplayConfig?
+
+  @Option(help: .hidden)
+  var diskSize: UInt8?
+
+  func run() async throws {
+    do {
+      let vmDir = try VMStorageLocal().open(name)
+      var vmConfig = try VMConfig(fromURL: vmDir.configURL)
+
+      if let cpu = cpu {
+        try vmConfig.setCPU(cpuCount: Int(cpu))
+      }
+
+      if let memory = memory {
+        try vmConfig.setMemory(memorySize: UInt64(memory) * 1024 * 1024)
+      }
+
+      if let display = display {
+        if (display.width > 0) {
+          vmConfig.display.width = display.width
+        }
+        if (display.height > 0) {
+          vmConfig.display.height = display.height
+        }
+        if (display.dpi > 0) {
+          vmConfig.display.dpi = display.dpi
+        }
+      }
+
+      try vmConfig.save(toURL: vmDir.configURL)
+
+      if diskSize != nil {
+        try vmDir.resizeDisk(diskSize!)
+      }
+
+      Foundation.exit(0)
+    } catch {
+      print(error)
+
+      Foundation.exit(1)
+    }
+  }
+}
+
+extension VMDisplayConfig: ExpressibleByArgument {
+  public init(argument: String) {
+    let parts = argument.components(separatedBy: "x").map {
+      Int($0) ?? 0
+    }
+    self = VMDisplayConfig(
+      width: parts[safe: 0] ?? 0,
+      height: parts[safe: 1] ?? 0,
+      dpi: parts[safe: 2] ?? 0
+    )
+  }
+}
@@ -0,0 +1,9 @@
+import Foundation
+
+struct Config {
+  public static let tartHomeDir: URL = FileManager.default
+          .homeDirectoryForCurrentUser
+          .appendingPathComponent(".tart", isDirectory: true)
+
+  public static let tartCacheDir: URL = tartHomeDir.appendingPathComponent("cache", isDirectory: true)
+}
@@ -0,0 +1,64 @@
+import Foundation
+
+class Credentials {
+  static func retrieveKeychain(host: String) throws -> (String, String)? {
+    let query: [String: Any] = [kSecClass as String: kSecClassInternetPassword,
+                                kSecAttrProtocol as String: kSecAttrProtocolHTTPS,
+                                kSecAttrServer as String: host,
+                                kSecMatchLimit as String: kSecMatchLimitOne,
+                                kSecReturnAttributes as String: true,
+                                kSecReturnData as String: true,
+                                kSecAttrLabel as String: "Tart Credentials",
+    ]
+
+    var item: CFTypeRef?
+    let status = SecItemCopyMatching(query as CFDictionary, &item)
+
+    if status != errSecSuccess {
+      if status == errSecItemNotFound {
+        return nil
+      }
+
+      throw RegistryError.AuthFailed(why: "Keychain returned unsuccessful status \(status)")
+    }
+
+    guard let item = item as? [String: Any],
+          let user = item[kSecAttrAccount as String] as? String,
+          let passwordData = item[kSecValueData as String] as? Data,
+          let password = String(data: passwordData, encoding: .utf8)
+      else {
+      throw RegistryError.AuthFailed(why: "Keychain item has unexpected format")
+    }
+
+    return (user, password)
+  }
+
+  static func retrieveStdin() throws -> (String, String) {
+    print("User: ", terminator: "")
+    let user = readLine() ?? ""
+
+    let rawPass = getpass("Password: ")
+    let pass = String(cString: rawPass!, encoding: .utf8)!
+
+    return (user, pass)
+  }
+
+  static func store(host: String, user: String, password: String) throws {
+    let attributes: [String: Any] = [kSecClass as String: kSecClassInternetPassword,
+                                     kSecAttrAccount as String: user,
+                                     kSecAttrProtocol as String: kSecAttrProtocolHTTPS,
+                                     kSecAttrServer as String: host,
+                                     kSecValueData as String: password,
+                                     kSecAttrLabel as String: "Tart Credentials",
+    ]
+
+    let status = SecItemAdd(attributes as CFDictionary, nil)
+
+    switch status {
+    case errSecSuccess, errSecDuplicateItem:
+      return
+    default:
+      throw RegistryError.AuthFailed(why: "Keychain returned unsuccessful status \(status)")
+    }
+  }
+}
@@ -0,0 +1,46 @@
+import Foundation
+
+public protocol Logger {
+  func appendNewLine(_ line: String) -> Void
+  func updateLastLine(_ line: String) -> Void
+}
+
+var defaultLogger: Logger = {
+  if ProcessInfo.processInfo.environment["CI"] != nil {
+    return SimpleConsoleLogger()
+  } else {
+    return InteractiveConsoleLogger()
+  }
+}()
+
+public class InteractiveConsoleLogger: Logger {
+  private let eraseCursorDown = "\u{001B}[J" // clear entire line
+  private let moveUp = "\u{001B}[1A" // move one line up
+  private let moveBeginningOfLine = "\r" // 
+
+  public init() {
+
+  }
+
+  public func appendNewLine(_ line: String) {
+    print(line, terminator: "\n")
+  }
+
+  public func updateLastLine(_ line: String) {
+    print(moveUp, moveBeginningOfLine, eraseCursorDown, line, separator: "", terminator: "\n")
+  }
+}
+
+public class SimpleConsoleLogger: Logger {
+  public init() {
+
+  }
+
+  public func appendNewLine(_ line: String) {
+    print(line, terminator: "\n")
+  }
+
+  public func updateLastLine(_ line: String) {
+    print(line, terminator: "\n")
+  }
+}
@@ -0,0 +1,21 @@
+import Foundation
+
+public class ProgressObserver: NSObject {
+  @objc var progressToObserve: Progress
+  var observation: NSKeyValueObservation?
+
+  public init(_ progress: Progress) {
+    progressToObserve = progress
+  }
+
+  func log(_ renderer: Logger) {
+    renderer.appendNewLine(ProgressObserver.lineToRender(progressToObserve))
+    observation = observe(\.progressToObserve.fractionCompleted) { progress, _ in
+      renderer.updateLastLine(ProgressObserver.lineToRender(self.progressToObserve))
+    }
+  }
+
+  private static func lineToRender(_ progress: Progress) -> String {
+    String(Int(100 * progress.fractionCompleted)) + "%"
+  }
+}
@@ -0,0 +1,17 @@
+import Foundation
+
+public class URLSessionLogger: NSObject, URLSessionTaskDelegate {
+  let renderer: Logger
+
+  public init(_ renderer: Logger) {
+    self.renderer = renderer
+  }
+
+  public func urlSession(_ session: URLSession, task: URLSessionTask, didSendBodyData bytesSent: Int64, totalBytesSent: Int64, totalBytesExpectedToSend: Int64) {
+    renderer.updateLastLine(URLSessionLogger.lineToRender(task.progress))
+  }
+
+  private static func lineToRender(_ progress: Progress) -> String {
+    String(100 * progress.completedUnitCount / progress.totalUnitCount) + "%"
+  }
+}
@@ -0,0 +1,27 @@
+import Foundation
+import CryptoKit
+
+class Digest {
+  var hash: SHA256 = SHA256()
+
+  func update(_ data: Data) {
+    hash.update(data: data)
+  }
+
+  func finalize() -> String {
+    hash.finalize().hexdigest()
+  }
+
+  static func hash(_ data: Data) -> String {
+    SHA256.hash(data: data).hexdigest()
+  }
+}
+
+extension SHA256.Digest {
+  func hexdigest() -> String {
+    "sha256:" + self.map {
+              String(format: "%02x", $0)
+            }
+            .joined()
+  }
+}
@@ -0,0 +1,28 @@
+import Foundation
+
+let ociManifestMediaType = "application/vnd.oci.image.manifest.v1+json"
+let ociConfigMediaType = "application/vnd.oci.image.config.v1+json"
+
+struct OCIManifest: Encodable, Decodable {
+  var schemaVersion: Int = 2
+  var mediaType: String = ociManifestMediaType
+  var config: OCIManifestConfig
+  var layers: [OCIManifestLayer] = Array()
+}
+
+struct OCIManifestConfig: Encodable, Decodable {
+  var mediaType: String = ociConfigMediaType
+  var size: Int
+  var digest: String
+}
+
+struct OCIManifestLayer: Encodable, Decodable {
+  var mediaType: String
+  var size: Int
+  var digest: String
+}
+
+struct Descriptor {
+  var size: Int
+  var digest: String
+}
@@ -0,0 +1,222 @@
+import Foundation
+
+enum RegistryError: Error {
+  case UnexpectedHTTPStatusCode(when: String, code: Int, details: String = "")
+  case MissingLocationHeader
+  case AuthFailed(why: String, details: String = "")
+  case MalformedHeader(why: String)
+}
+
+struct TokenResponse: Decodable {
+  var token: String
+}
+
+class Registry {
+  var baseURL: URL
+  var namespace: String
+
+  var token: String? = nil
+
+  init(host: String, namespace: String) throws {
+    var baseURLComponents = URLComponents()
+    baseURLComponents.scheme = "https"
+    baseURLComponents.host = host
+    baseURLComponents.path = "/v2/"
+
+    baseURL = baseURLComponents.url!
+    self.namespace = namespace
+  }
+
+  func pushManifest(reference: String, config: Descriptor, layers: [OCIManifestLayer]) async throws -> String {
+    let manifest = OCIManifest(config: OCIManifestConfig(size: config.size, digest: config.digest),
+      layers: layers)
+    let manifestJSON = try JSONEncoder().encode(manifest)
+
+    let (responseData, response) = try await endpointRequest("PUT", "\(namespace)/manifests/\(reference)",
+      headers: ["Content-Type": manifest.mediaType],
+      body: manifestJSON)
+    if response.statusCode != 201 {
+      throw RegistryError.UnexpectedHTTPStatusCode(when: "pushing manifest", code: response.statusCode,
+        details: String(decoding: responseData, as: UTF8.self))
+    }
+
+    return Digest.hash(manifestJSON)
+  }
+
+  public func pullManifest(reference: String) async throws -> (OCIManifest, Data) {
+    let (responseData, response) = try await endpointRequest("GET", "\(namespace)/manifests/\(reference)",
+      headers: ["Accept": ociManifestMediaType])
+    if response.statusCode != 200 {
+      throw RegistryError.UnexpectedHTTPStatusCode(when: "pulling manifest", code: response.statusCode,
+        details: String(decoding: responseData, as: UTF8.self))
+    }
+
+    let manifest = try JSONDecoder().decode(OCIManifest.self, from: responseData)
+
+    return (manifest, responseData)
+  }
+
+  private func uploadLocationFromResponse(response: HTTPURLResponse) throws -> URLComponents {
+    guard let uploadLocationRaw = response.value(forHTTPHeaderField: "Location") else {
+      throw RegistryError.MissingLocationHeader
+    }
+
+    guard let uploadLocation = URL(string: uploadLocationRaw) else {
+      throw RegistryError.MalformedHeader(why: "Location header contains invalid URL: \"\(uploadLocationRaw)\"")
+    }
+
+    return URLComponents(url: uploadLocation.absolutize(baseURL), resolvingAgainstBaseURL: true)!
+  }
+
+  public func pushBlob(fromData: Data, chunkSize: Int = 5 * 1024 * 1024) async throws -> String {
+    // Initiate a blob upload
+    let (postData, postResponse) = try await endpointRequest("POST", "\(namespace)/blobs/uploads/",
+      headers: ["Content-Length": "0"])
+    if postResponse.statusCode != 202 {
+      throw RegistryError.UnexpectedHTTPStatusCode(when: "pushing blob (POST)", code: postResponse.statusCode,
+        details: String(decoding: postData, as: UTF8.self))
+    }
+
+    // Figure out where to upload the blob
+    let uploadLocation = try uploadLocationFromResponse(response: postResponse)
+
+    // Upload the blob
+    let headers = [
+      "Content-Length": "\(fromData.count)",
+      "Content-Type": "application/octet-stream",
+    ]
+
+    let digest = Digest.hash(fromData)
+    let parameters = [
+      "digest": digest,
+    ]
+
+    let (putData, putResponse) = try await rawRequest("PUT", uploadLocation, headers: headers, parameters: parameters,
+      body: fromData)
+    if putResponse.statusCode != 201 {
+      throw RegistryError.UnexpectedHTTPStatusCode(when: "pushing blob (PUT)", code: putResponse.statusCode,
+        details: String(decoding: putData, as: UTF8.self))
+    }
+
+    return digest
+  }
+
+  public func pullBlob(_ digest: String) async throws -> Data {
+    let (putData, putResponse) = try await endpointRequest("GET", "\(namespace)/blobs/\(digest)")
+    if putResponse.statusCode != 200 {
+      throw RegistryError.UnexpectedHTTPStatusCode(when: "pulling blob", code: putResponse.statusCode,
+        details: String(decoding: putData, as: UTF8.self))
+    }
+
+    return putData
+  }
+
+  private func endpointRequest(
+    _ method: String,
+    _ endpoint: String,
+    headers: Dictionary<String, String> = Dictionary(),
+    parameters: Dictionary<String, String> = Dictionary(),
+    body: Data? = nil
+  ) async throws -> (Data, HTTPURLResponse) {
+    let url = URL(string: endpoint, relativeTo: baseURL)!
+    let urlComponents = URLComponents(url: url, resolvingAgainstBaseURL: true)!
+
+    return try await rawRequest(method, urlComponents, headers: headers, parameters: parameters, body: body)
+  }
+
+  private func rawRequest(
+    _ method: String,
+    _ urlComponents: URLComponents,
+    headers: Dictionary<String, String> = Dictionary(),
+    parameters: Dictionary<String, String> = Dictionary(),
+    body: Data? = nil
+  ) async throws -> (Data, HTTPURLResponse) {
+    var urlComponents = urlComponents
+
+    if urlComponents.queryItems == nil {
+      urlComponents.queryItems = []
+    }
+    urlComponents.queryItems?.append(contentsOf: parameters.map { key, value -> URLQueryItem in
+      URLQueryItem(name: key, value: value)
+    })
+
+    var request = URLRequest(url: urlComponents.url!)
+    request.httpMethod = method
+    for (key, value) in headers {
+      request.addValue(value, forHTTPHeaderField: key)
+    }
+    request.httpBody = body
+
+    var (data, response) = try await authAwareRequest(request: request)
+
+    if response.statusCode == 401 {
+      try await auth(response: response)
+      (data, response) = try await authAwareRequest(request: request)
+    }
+
+    return (data, response)
+  }
+
+  private func auth(response: HTTPURLResponse) async throws {
+    // Process WWW-Authenticate header
+    guard let wwwAuthenticateRaw = response.value(forHTTPHeaderField: "WWW-Authenticate") else {
+      throw RegistryError.AuthFailed(why: "got HTTP 401, but WWW-Authenticate header is missing")
+    }
+
+    let wwwAuthenticate = try WWWAuthenticate(rawHeaderValue: wwwAuthenticateRaw)
+    if wwwAuthenticate.scheme != "Bearer" {
+      throw RegistryError.AuthFailed(why: "WWW-Authenticate header's authentication scheme "
+        + "\"\(wwwAuthenticate.scheme)\" is unsupported, expected \"Bearer\" scheme")
+    }
+    guard let realm = wwwAuthenticate.kvs["realm"] else {
+      throw RegistryError.AuthFailed(why: "WWW-Authenticate header is missing a \"realm\" directive")
+    }
+
+    // Request a token
+    guard var authenticateURL = URLComponents(string: realm) else {
+      throw RegistryError.AuthFailed(why: "WWW-Authenticate header's realm directive "
+        + "\"\(realm)\" doesn't look like URL")
+    }
+
+    // Token Authentication Specification[1]:
+    //
+    // >To respond to this challenge, the client will need to make a GET request
+    // >[...] using the service and scope values from the WWW-Authenticate header.
+    //
+    // [1]: https://docs.docker.com/registry/spec/auth/token/
+    authenticateURL.queryItems = ["scope", "service"].compactMap { key in
+      if let value = wwwAuthenticate.kvs[key] {
+        return URLQueryItem(name: key, value: value)
+      } else {
+        return nil
+      }
+    }
+
+    var headers: Dictionary<String, String> = Dictionary()
+
+    if let (user, password) = try Credentials.retrieveKeychain(host: baseURL.host!) {
+      let encodedCredentials = "\(user):\(password)".data(using: .utf8)?.base64EncodedString()
+      headers["Authorization"] = "Basic \(encodedCredentials!)"
+    }
+
+    let (responseData, response) = try await rawRequest("GET", authenticateURL, headers: headers)
+    if response.statusCode != 200 {
+      throw RegistryError.AuthFailed(why: "received unexpected HTTP status code \(response.statusCode) "
+        + "while retrieving an authentication token", details: String(decoding: responseData, as: UTF8.self))
+    }
+
+    token = try JSONDecoder().decode(TokenResponse.self, from: responseData).token
+  }
+
+  private func authAwareRequest(request: URLRequest) async throws -> (Data, HTTPURLResponse) {
+    var request = request
+
+    if let token = self.token {
+      request.addValue("Bearer \(token)", forHTTPHeaderField: "Authorization")
+    }
+
+    let (responseData, response) = try await URLSession.shared.data(for: request)
+
+    return (responseData, response as! HTTPURLResponse)
+  }
+}
@@ -0,0 +1,103 @@
+import Foundation
+import Parsing
+
+struct Tail {
+  enum TailType {
+    case Tag
+    case Digest
+  }
+
+  var type: TailType
+  var value: String
+}
+
+struct RemoteName: Comparable, CustomStringConvertible {
+  var host: String
+  var namespace: String
+  var reference: String = "latest"
+  var fullyQualifiedReference: String {
+    get {
+      if reference.starts(with: "sha256:") {
+        return "@" + reference
+      }
+
+      return ":" + reference
+    }
+  }
+
+  init(host: String, namespace: String, reference: String) {
+    self.host = host
+    self.namespace = namespace
+    self.reference = reference
+  }
+
+  init(_ name: String) throws {
+    let csNormal = [
+      UInt8(ascii: "a")...UInt8(ascii: "z"),
+      UInt8(ascii: "0")...UInt8(ascii: "9"),
+    ].asCharacterSet().union(CharacterSet(charactersIn: "_-."))
+
+    let csHex = [
+      UInt8(ascii: "a")...UInt8(ascii: "f"),
+      UInt8(ascii: "0")...UInt8(ascii: "9"),
+    ].asCharacterSet()
+
+    let parser = Parse {
+      Consumed {
+        csNormal
+        Optionally {
+          ":"
+          Digits()
+        }
+      }
+      "/"
+      csNormal.union(CharacterSet(charactersIn: "/"))
+      Optionally {
+        OneOf {
+          Parse {
+            ":"
+            csNormal.map {
+              Tail(type: .Tag, value: String($0))
+            }
+          }
+          Parse {
+            "@sha256:"
+            csHex.map {
+              Tail(type: .Digest, value: "sha256:" + String($0))
+            }
+          }
+        }
+      }
+      End()
+    }
+
+    let result = try parser.parse(name)
+
+    host = String(result.0)
+    namespace = String(result.1)
+    if let tail = result.2 {
+      reference = tail.value
+    }
+  }
+
+  static func <(lhs: RemoteName, rhs: RemoteName) -> Bool {
+    if lhs.host != rhs.host {
+      return lhs.host < rhs.host
+    } else if lhs.namespace != rhs.namespace {
+      return lhs.namespace < rhs.namespace
+    } else {
+      return lhs.reference < rhs.reference
+    }
+  }
+
+  var description: String {
+    "\(host)/\(namespace)\(fullyQualifiedReference)"
+  }
+}
+
+extension Array where Self.Element == ClosedRange<UInt8> {
+  func asCharacterSet() -> CharacterSet {
+    let characters = self.joined().map { String(UnicodeScalar($0)) }.joined()
+    return CharacterSet(charactersIn: characters)
+  }
+}
@@ -0,0 +1,7 @@
+import Foundation
+
+extension URL {
+  func absolutize(_ baseURL: URL) -> Self {
+    URL(string: absoluteString, relativeTo: baseURL)!
+  }
+}
@@ -0,0 +1,63 @@
+import Foundation
+
+// WWW-Authenticate header parser based on details from RFCs[1][2]
+///
+// [1]: https://www.rfc-editor.org/rfc/rfc2617#section-3.2.1
+// [2]: https://www.rfc-editor.org/rfc/rfc6750#section-3
+class WWWAuthenticate {
+  var scheme: String
+  var kvs: Dictionary<String, String> = Dictionary()
+
+  init(rawHeaderValue: String) throws {
+    let splits = rawHeaderValue.split(separator: " ", maxSplits: 1)
+
+    if splits.count == 2 {
+      scheme = String(splits[0])
+    } else {
+      throw RegistryError.MalformedHeader(why: "WWW-Authenticate header should consist of two parts: "
+        + "scheme and directives")
+    }
+
+    let rawDirectives = contextAwareCommaSplit(rawDirectives: String(splits[1]))
+
+    try rawDirectives.forEach { sequence in
+      let parts = sequence.split(separator: "=", maxSplits: 1)
+      if parts.count != 2 {
+        throw RegistryError.MalformedHeader(why: "Each WWW-Authenticate header directive should be in the form of "
+          + "key=value or key=\"value\"")
+      }
+
+      let key = String(parts[0])
+      var value = String(parts[1])
+      value = value.trimmingCharacters(in: CharacterSet(charactersIn: "\""))
+
+      kvs[key] = value
+    }
+  }
+
+  private func contextAwareCommaSplit(rawDirectives: String) -> Array<String> {
+    var result: Array<String> = Array()
+    var inQuotation: Bool = false
+    var accumulator: Array<Character> = Array()
+
+    for ch in rawDirectives {
+      if ch == "," && !inQuotation {
+        result.append(String(accumulator))
+        accumulator.removeAll()
+        continue
+      }
+
+      accumulator.append(ch)
+
+      if ch == "\"" {
+        inQuotation.toggle()
+      }
+    }
+
+    if !accumulator.isEmpty {
+      result.append(String(accumulator))
+    }
+
+    return result
+  }
+}
@@ -0,0 +1,19 @@
+import ArgumentParser
+
+@main
+struct Root: AsyncParsableCommand {
+  static var configuration = CommandConfiguration(
+    commandName: "tart",
+    subcommands: [
+      Create.self,
+      Clone.self,
+      Run.self,
+      Set.self,
+      List.self,
+      Login.self,
+      IP.self,
+      Pull.self,
+      Push.self,
+      Delete.self,
+    ])
+}
@@ -0,0 +1,7 @@
+import Foundation
+
+extension Collection {
+  subscript (safe index: Index) -> Element? {
+    indices.contains(index) ? self[index] : nil
+  }
+}
@@ -0,0 +1,213 @@
+import Foundation
+import Virtualization
+
+struct UnsupportedRestoreImageError: Error {
+}
+
+struct NoMainScreenFoundError: Error {
+}
+
+struct DownloadFailed: Error {
+}
+
+class VM: NSObject, VZVirtualMachineDelegate, ObservableObject {
+  // Virtualization.Framework's virtual machine
+  @Published var virtualMachine: VZVirtualMachine
+
+  // Semaphore used to communicate with the VZVirtualMachineDelegate
+  var sema = DispatchSemaphore(value: 0)
+
+  // VM's config
+  var name: String
+  
+  // VM's config
+  var config: VMConfig
+
+  init(vmDir: VMDirectory) throws {
+    let auxStorage = VZMacAuxiliaryStorage(contentsOf: vmDir.nvramURL)
+
+    name = vmDir.name
+    config = try VMConfig.init(fromURL: vmDir.configURL)
+
+    let configuration = try VM.craftConfiguration(diskURL: vmDir.diskURL, auxStorage: auxStorage, vmConfig: config)
+    virtualMachine = VZVirtualMachine(configuration: configuration)
+
+    super.init()
+
+    virtualMachine.delegate = self
+  }
+
+  static func retrieveLatestIPSW() async throws -> URL {
+    defaultLogger.appendNewLine("Looking up the latest supported IPSW...")
+    let image = try await withCheckedThrowingContinuation { continuation in
+      VZMacOSRestoreImage.fetchLatestSupported() { result in
+        continuation.resume(with: result)
+      }
+    }
+
+
+    let ipswCacheFolder = Config.tartCacheDir.appendingPathComponent("IPSWs", isDirectory: true)
+    try FileManager.default.createDirectory(at: ipswCacheFolder, withIntermediateDirectories: true)
+
+    let expectedIPSWLocation = ipswCacheFolder.appendingPathComponent("\(image.buildVersion).ipsw", isDirectory: false)
+
+    if FileManager.default.fileExists(atPath: expectedIPSWLocation.path) {
+      defaultLogger.appendNewLine("Using cached *.ipsw file...")
+      return expectedIPSWLocation
+    }
+
+    defaultLogger.appendNewLine("Fetching \(expectedIPSWLocation.lastPathComponent)...")
+
+    let data: Data = try await withCheckedThrowingContinuation { continuation in
+      let downloadedTask = URLSession.shared.dataTask(with: image.url) { data, response, error in
+        if error != nil {
+          continuation.resume(throwing: error!)
+          return
+        }
+        if (data == nil) {
+          continuation.resume(throwing: DownloadFailed())
+          return
+        }
+        continuation.resume(returning: data!)
+      }
+      ProgressObserver(downloadedTask.progress).log(defaultLogger)
+      downloadedTask.resume()
+    }
+
+    try data.write(to: expectedIPSWLocation, options: [.atomic])
+    return expectedIPSWLocation
+  }
+
+  init(vmDir: VMDirectory, ipswURL: URL?, diskSizeGB: UInt8) async throws {
+    let ipswURL = ipswURL != nil ? ipswURL! : try await VM.retrieveLatestIPSW();
+
+    // Load the restore image and try to get the requirements
+    // that match both the image and our platform
+    let image = try await withCheckedThrowingContinuation { continuation in
+      VZMacOSRestoreImage.load(from: ipswURL) { result in
+        continuation.resume(with: result)
+      }
+    }
+
+    guard let requirements = image.mostFeaturefulSupportedConfiguration else {
+      throw UnsupportedRestoreImageError()
+    }
+
+    // Create NVRAM
+    let auxStorage = try VZMacAuxiliaryStorage(creatingStorageAt: vmDir.nvramURL, hardwareModel: requirements.hardwareModel)
+
+    // Create disk
+    try vmDir.resizeDisk(diskSizeGB)
+
+    name = vmDir.name
+    // Create config
+    config = VMConfig(
+      hardwareModel: requirements.hardwareModel,
+      cpuCountMin: requirements.minimumSupportedCPUCount,
+      memorySizeMin: requirements.minimumSupportedMemorySize
+    )
+    try config.save(toURL: vmDir.configURL)
+
+    // Initialize the virtual machine and its configuration
+    let configuration = try VM.craftConfiguration(diskURL: vmDir.diskURL, auxStorage: auxStorage, vmConfig: config)
+    virtualMachine = VZVirtualMachine(configuration: configuration)
+
+    super.init()
+
+    virtualMachine.delegate = self
+
+    // Run automated installation
+    try await withCheckedThrowingContinuation { (continuation: CheckedContinuation<Void, Error>) in
+      DispatchQueue.main.async {
+        let installer = VZMacOSInstaller(virtualMachine: self.virtualMachine, restoringFromImageAt: ipswURL)
+
+        defaultLogger.appendNewLine("Installing OS...")
+        ProgressObserver(installer.progress).log(defaultLogger)
+
+        installer.install { result in
+          continuation.resume(with: result)
+        }
+      }
+    }
+  }
+
+  func run() async throws {
+    try await withCheckedThrowingContinuation { continuation in
+      DispatchQueue.main.async {
+        self.virtualMachine.start(completionHandler: { result in
+          continuation.resume(with: result)
+        })
+      }
+    }
+
+    sema.wait()
+  }
+
+  static func craftConfiguration(diskURL: URL, auxStorage: VZMacAuxiliaryStorage, vmConfig: VMConfig) throws -> VZVirtualMachineConfiguration {
+    let configuration = VZVirtualMachineConfiguration()
+
+    // Boot loader
+    configuration.bootLoader = VZMacOSBootLoader()
+
+    // CPU and memory
+    configuration.cpuCount = vmConfig.cpuCount
+    configuration.memorySize = vmConfig.memorySize
+
+    // Platform
+    let platform = VZMacPlatformConfiguration()
+
+    platform.machineIdentifier = vmConfig.ecid
+    platform.auxiliaryStorage = auxStorage
+    platform.hardwareModel = vmConfig.hardwareModel
+
+    configuration.platform = platform
+
+    // Display
+    let graphicsDeviceConfiguration = VZMacGraphicsDeviceConfiguration()
+    graphicsDeviceConfiguration.displays = [
+      VZMacGraphicsDisplayConfiguration(
+        widthInPixels: vmConfig.display.width,
+        heightInPixels: vmConfig.display.height,
+        pixelsPerInch: vmConfig.display.dpi
+      )
+    ]
+    configuration.graphicsDevices = [graphicsDeviceConfiguration]
+
+    // Keyboard and mouse
+    configuration.keyboards = [VZUSBKeyboardConfiguration()]
+    configuration.pointingDevices = [VZUSBScreenCoordinatePointingDeviceConfiguration()]
+
+    // Networking
+    let vio = VZVirtioNetworkDeviceConfiguration()
+    vio.attachment = VZNATNetworkDeviceAttachment()
+    vio.macAddress = vmConfig.macAddress
+    configuration.networkDevices = [vio]
+
+    // Storage
+    let attachment = try VZDiskImageStorageDeviceAttachment(url: diskURL, readOnly: false)
+    let storage = VZVirtioBlockDeviceConfiguration(attachment: attachment)
+    configuration.storageDevices = [storage]
+
+    // Entropy
+    configuration.entropyDevices = [VZVirtioEntropyDeviceConfiguration()]
+
+    try configuration.validate()
+
+    return configuration
+  }
+
+  func guestDidStop(_ virtualMachine: VZVirtualMachine) {
+    print("guest has stopped the virtual machine")
+    sema.signal()
+  }
+
+  func virtualMachine(_ virtualMachine: VZVirtualMachine, didStopWithError error: Error) {
+    print("guest has stopped the virtual machine due to error")
+    sema.signal()
+  }
+
+  func virtualMachine(_ virtualMachine: VZVirtualMachine, networkDevice: VZNetworkDevice, attachmentWasDisconnectedWithError error: Error) {
+    print("virtual machine's network attachment has been disconnected")
+    sema.signal()
+  }
+}
@@ -0,0 +1,152 @@
+import Virtualization
+
+class LessThanMinimalResourcesError: NSObject, LocalizedError {
+  var userExplanation: String
+
+  init(_ userExplanation: String) {
+    self.userExplanation = userExplanation
+  }
+
+  override var description: String {
+    get {
+      "LessThanMinimalResourcesError: \(userExplanation)"
+    }
+  }
+}
+
+enum CodingKeys: String, CodingKey {
+  case version
+  case ecid
+  case hardwareModel
+  case cpuCountMin
+  case cpuCount
+  case memorySizeMin
+  case memorySize
+  case macAddress
+  case display
+}
+
+struct VMDisplayConfig: Codable {
+  var width: Int = 1024
+  var height: Int = 768
+  var dpi: Int = 72
+}
+
+struct VMConfig: Codable {
+  var version: Int = 1
+  var ecid: VZMacMachineIdentifier
+  var hardwareModel: VZMacHardwareModel
+  var cpuCountMin: Int
+  private(set) var cpuCount: Int
+  var memorySizeMin: UInt64
+  private(set) var memorySize: UInt64
+  var macAddress: VZMACAddress
+  
+  var display: VMDisplayConfig = VMDisplayConfig()
+
+  init(
+    ecid: VZMacMachineIdentifier = VZMacMachineIdentifier(),
+    hardwareModel: VZMacHardwareModel,
+    cpuCountMin: Int,
+    memorySizeMin: UInt64,
+    macAddress: VZMACAddress = VZMACAddress.randomLocallyAdministered()
+  ) {
+    self.ecid = ecid
+    self.hardwareModel = hardwareModel
+    self.macAddress = macAddress
+    self.cpuCountMin = cpuCountMin
+    self.memorySizeMin = memorySizeMin
+    cpuCount = cpuCountMin
+    memorySize = memorySizeMin
+  }
+
+  init(fromData: Data) throws {
+    self = try JSONDecoder().decode(VMConfig.self, from: fromData)
+  }
+
+  init(fromURL: URL) throws {
+    self = try Self(fromData: try Data(contentsOf: fromURL))
+  }
+
+  func save(toURL: URL) throws {
+    let encoder = JSONEncoder()
+    encoder.outputFormatting = .prettyPrinted
+    try encoder.encode(self).write(to: toURL)
+  }
+
+  init(from decoder: Decoder) throws {
+    let container = try decoder.container(keyedBy: CodingKeys.self)
+
+    version = try container.decode(Int.self, forKey: .version)
+
+    let encodedECID = try container.decode(String.self, forKey: .ecid)
+    guard let data = Data.init(base64Encoded: encodedECID) else {
+      throw DecodingError.dataCorruptedError(forKey: .ecid,
+                in: container,
+                debugDescription: "failed to initialize Data using the provided value")
+    }
+    guard let ecid = VZMacMachineIdentifier.init(dataRepresentation: data) else {
+      throw DecodingError.dataCorruptedError(forKey: .ecid,
+                in: container,
+                debugDescription: "failed to initialize VZMacMachineIdentifier using the provided value")
+    }
+    self.ecid = ecid
+
+    let encodedHardwareModel = try container.decode(String.self, forKey: .hardwareModel)
+    guard let data = Data.init(base64Encoded: encodedHardwareModel) else {
+      throw DecodingError.dataCorruptedError(forKey: .hardwareModel, in: container, debugDescription: "")
+    }
+    guard let hardwareModel = VZMacHardwareModel.init(dataRepresentation: data) else {
+      throw DecodingError.dataCorruptedError(forKey: .hardwareModel, in: container, debugDescription: "")
+    }
+    self.hardwareModel = hardwareModel
+
+    cpuCountMin = try container.decode(Int.self, forKey: .cpuCountMin)
+    cpuCount = try container.decode(Int.self, forKey: .cpuCount)
+    memorySizeMin = try container.decode(UInt64.self, forKey: .memorySizeMin)
+    memorySize = try container.decode(UInt64.self, forKey: .memorySize)
+
+    let encodedMacAddress = try container.decode(String.self, forKey: .macAddress)
+    guard let macAddress = VZMACAddress.init(string: encodedMacAddress) else {
+      throw DecodingError.dataCorruptedError(
+                forKey: .hardwareModel,
+                in: container,
+                debugDescription: "failed to initialize VZMacAddress using the provided value")
+    }
+    self.macAddress = macAddress
+    
+    display = try container.decodeIfPresent(VMDisplayConfig.self, forKey: .display) ?? VMDisplayConfig()
+  }
+
+  func encode(to encoder: Encoder) throws {
+    var container = encoder.container(keyedBy: CodingKeys.self)
+
+    try container.encode(version, forKey: .version)
+    try container.encode(ecid.dataRepresentation.base64EncodedString(), forKey: .ecid)
+    try container.encode(hardwareModel.dataRepresentation.base64EncodedString(), forKey: .hardwareModel)
+    try container.encode(cpuCountMin, forKey: .cpuCountMin)
+    try container.encode(cpuCount, forKey: .cpuCount)
+    try container.encode(memorySizeMin, forKey: .memorySizeMin)
+    try container.encode(memorySize, forKey: .memorySize)
+    try container.encode(macAddress.string, forKey: .macAddress)
+    try container.encode(display, forKey: .display)
+  }
+
+  mutating func setCPU(cpuCount: Int) throws {
+    if cpuCount < cpuCountMin {
+      throw LessThanMinimalResourcesError("VM should have \(cpuCountMin) CPU cores"
+              + " at minimum (requested \(cpuCount))")
+    }
+
+    self.cpuCount = cpuCount
+  }
+
+  mutating func setMemory(memorySize: UInt64) throws {
+    if memorySize < memorySizeMin {
+      throw LessThanMinimalResourcesError("VM should have \(memorySizeMin) bytes"
+              + " of memory at minimum (requested \(memorySizeMin))")
+    }
+
+    self.memorySize = memorySize
+  }
+}
@@ -0,0 +1,143 @@
+import Foundation
+import Compression
+
+enum OCIError: Error {
+  case ShouldBeExactlyOneLayer
+  case ShouldBeAtLeastOneLayer
+  case FailedToCreateDiskFile
+}
+
+extension VMDirectory {
+  private static let bufferSizeBytes = 64 * 1024 * 1024
+  private static let layerLimitBytes = 500 * 1000 * 1000
+
+  private static let configMediaType = "application/vnd.cirruslabs.tart.config.v1"
+  private static let diskMediaType = "application/vnd.cirruslabs.tart.disk.v1"
+  private static let nvramMediaType = "application/vnd.cirruslabs.tart.nvram.v1"
+
+  func pullFromRegistry(registry: Registry, reference: String) async throws {
+    defaultLogger.appendNewLine("pulling manifest...")
+
+    let (manifest, _) = try await registry.pullManifest(reference: reference)
+
+    return try await pullFromRegistry(registry: registry, manifest: manifest)
+  }
+
+  func pullFromRegistry(registry: Registry, manifest: OCIManifest) async throws {
+    // Pull VM's config file layer and re-serialize it into a config file
+    let configLayers = manifest.layers.filter {
+      $0.mediaType == Self.configMediaType
+    }
+    if configLayers.count != 1 {
+      throw OCIError.ShouldBeExactlyOneLayer
+    }
+    let configData = try await registry.pullBlob(configLayers.first!.digest)
+    try VMConfig(fromData: configData).save(toURL: configURL)
+
+    // Pull VM's disk layers and decompress them sequentially into a disk file
+    let diskLayers = manifest.layers.filter {
+      $0.mediaType == Self.diskMediaType
+    }
+    if diskLayers.isEmpty {
+      throw OCIError.ShouldBeAtLeastOneLayer
+    }
+    if !FileManager.default.createFile(atPath: diskURL.path, contents: nil) {
+      throw OCIError.FailedToCreateDiskFile
+    }
+    let disk = try FileHandle(forWritingTo: diskURL)
+    let filter = try OutputFilter(.decompress, using: .lz4, bufferCapacity: Self.bufferSizeBytes) { data in
+      if let data = data {
+        disk.write(data)
+      }
+    }
+
+    // Progress
+    defaultLogger.appendNewLine("pulling disk...")
+    let progress = Progress(totalUnitCount: Int64(diskLayers.map{ $0.size }.reduce(0) { $0 + $1 }))
+    ProgressObserver(progress).log(defaultLogger)
+
+    for diskLayer in diskLayers {
+      let diskData = try await registry.pullBlob(diskLayer.digest)
+      try filter.write(diskData)
+
+      // Progress
+      progress.completedUnitCount += Int64(diskLayer.size)
+    }
+    try filter.finalize()
+    try disk.close()
+
+    // Pull VM's NVRAM file layer and store it in an NVRAM file
+    defaultLogger.appendNewLine("pulling NVRAM...")
+
+    let nvramLayers = manifest.layers.filter {
+      $0.mediaType == Self.nvramMediaType
+    }
+    if nvramLayers.count != 1 {
+      throw OCIError.ShouldBeExactlyOneLayer
+    }
+    let nvramData = try await registry.pullBlob(nvramLayers.first!.digest)
+    try nvramData.write(to: nvramURL)
+  }
+
+  func pushToRegistry(registry: Registry, references: [String]) async throws {
+    var layers = Array<OCIManifestLayer>()
+
+    // Read VM's config and push it as blob
+    let config = try VMConfig(fromURL: configURL)
+    let configJSON = try JSONEncoder().encode(config)
+    let configDigest = try await registry.pushBlob(fromData: configJSON)
+    layers.append(OCIManifestLayer(mediaType: Self.configMediaType, size: configJSON.count, digest: configDigest))
+
+    // Progress
+    let diskSize = try FileManager.default.attributesOfItem(atPath: diskURL.path)[.size] as! Int64
+    
+    defaultLogger.appendNewLine("pushing disk... this will take a while...")
+    let progress = Progress(totalUnitCount: diskSize)
+    ProgressObserver(progress).log(defaultLogger)
+
+    // Read VM's compressed disk as chunks
+    // and sequentially upload them as blobs
+    let disk = try FileHandle(forReadingFrom: diskURL)
+    let compressingFilter = try InputFilter<Data>(.compress, using: .lz4, bufferCapacity: Self.bufferSizeBytes) { _ in
+      let data = try disk.read(upToCount: Self.bufferSizeBytes)
+      
+      progress.completedUnitCount += Int64(data?.count ?? 0)
+
+      return data
+    }
+    while let chunk = try compressingFilter.readData(ofLength: Self.layerLimitBytes) {
+      let chunkDigest = try await registry.pushBlob(fromData: chunk)
+      layers.append(OCIManifestLayer(mediaType: Self.diskMediaType, size: chunk.count, digest: chunkDigest))
+    }
+
+    // Read VM's NVRAM and push it as blob
+    defaultLogger.appendNewLine("pushing NVRAM...")
+
+    let nvram = try FileHandle(forReadingFrom: nvramURL).readToEnd()!
+    let nvramDigest = try await registry.pushBlob(fromData: nvram)
+    layers.append(OCIManifestLayer(mediaType: Self.nvramMediaType, size: nvram.count, digest: nvramDigest))
+
+    // Craft a stub OCI config for Docker Hub compatibility
+    struct OCIConfig: Encodable, Decodable {
+      var architecture: String = "arm64"
+      var os: String = "darwin"
+    }
+
+    let ociConfigJSON = try JSONEncoder().encode(OCIConfig())
+    let ociConfigDigest = try await registry.pushBlob(fromData: ociConfigJSON)
+    let ociConfigDescriptor = Descriptor(size: ociConfigJSON.count, digest: ociConfigDigest)
+
+    // Manifest
+    for reference in references {
+      defaultLogger.appendNewLine("pushing manifest for \(reference)...")
+
+      _ = try await registry.pushManifest(reference: reference, config: ociConfigDescriptor, layers: layers)
+    }
+  }
+}
+
+extension Progress {
+  func percentage() -> String {
+    String(Int(100 * fractionCompleted)) + "%"
+  }
+}
@@ -0,0 +1,73 @@
+import Foundation
+import Virtualization
+
+struct UninitializedVMDirectoryError: Error {
+}
+
+struct AlreadyInitializedVMDirectoryError: Error {
+}
+
+struct VMDirectory {
+  var baseURL: URL
+
+  var configURL: URL {
+    baseURL.appendingPathComponent("config.json")
+  }
+  var diskURL: URL {
+    baseURL.appendingPathComponent("disk.img")
+  }
+  var nvramURL: URL {
+    baseURL.appendingPathComponent("nvram.bin")
+  }
+
+  var name: String {
+    baseURL.lastPathComponent
+  }
+
+  var initialized: Bool {
+    FileManager.default.fileExists(atPath: configURL.path) &&
+      FileManager.default.fileExists(atPath: diskURL.path) &&
+      FileManager.default.fileExists(atPath: nvramURL.path)
+  }
+
+  func initialize(overwrite: Bool = false) throws {
+    if !overwrite && initialized {
+      throw AlreadyInitializedVMDirectoryError()
+    }
+
+    try FileManager.default.createDirectory(at: baseURL, withIntermediateDirectories: true, attributes: nil)
+
+    try? FileManager.default.removeItem(at: configURL)
+    try? FileManager.default.removeItem(at: diskURL)
+    try? FileManager.default.removeItem(at: nvramURL)
+  }
+
+  func validate() throws {
+    if !initialized {
+      throw UninitializedVMDirectoryError()
+    }
+  }
+
+  func clone(to: VMDirectory, generateMAC: Bool) throws {
+    try FileManager.default.copyItem(at: configURL, to: to.configURL)
+    try FileManager.default.copyItem(at: nvramURL, to: to.nvramURL)
+    try FileManager.default.copyItem(at: diskURL, to: to.diskURL)
+
+    // Re-generate MAC address
+    var newVMConfig = try VMConfig(fromURL: to.configURL)
+    if generateMAC {
+      newVMConfig.macAddress = VZMACAddress.randomLocallyAdministered()
+    }
+    try newVMConfig.save(toURL: to.configURL)
+  }
+
+  func resizeDisk(_ sizeGB: UInt8) throws {
+    if !FileManager.default.fileExists(atPath: diskURL.path) {
+      FileManager.default.createFile(atPath: diskURL.path, contents: nil, attributes: nil)
+    }
+    let diskFileHandle = try FileHandle.init(forWritingTo: diskURL)
+    // macOS considers kilo being 1000 and not 1024
+    try diskFileHandle.truncate(atOffset: UInt64(sizeGB) * 1000 * 1000 * 1000)
+    try diskFileHandle.close()
+  }
+}
@@ -0,0 +1,53 @@
+import Foundation
+
+class VMStorageHelper {
+  static func open(_ name: String) throws -> VMDirectory {
+    try missingVMWrap(name) {
+      if let remoteName = try? RemoteName(name) {
+        return try VMStorageOCI().open(remoteName)
+      } else {
+        return try VMStorageLocal().open(name)
+      }
+    }
+  }
+
+  static func delete(_ name: String) throws {
+    try missingVMWrap(name) {
+      if let remoteName = try? RemoteName(name) {
+        try VMStorageOCI().delete(remoteName)
+      } else {
+        try VMStorageLocal().delete(name)
+      }
+    }
+  }
+
+  private static func missingVMWrap<R: Any>(_ name: String, closure: () throws -> R) throws -> R {
+    do {
+      return try closure()
+    } catch {
+      if error.isFileNotFound() {
+        throw RuntimeError("source VM \"\(name)\" not found, is it listed in \"tart list\"?")
+      }
+
+      throw error
+    }
+  }
+}
+
+extension Error {
+  func isFileNotFound() -> Bool {
+    (self as NSError).code == NSFileReadNoSuchFileError
+  }
+}
+
+class RuntimeError: Error, CustomStringConvertible {
+  let message: String
+
+  init(_ message: String) {
+    self.message = message
+  }
+
+  var description: String {
+    message
+  }
+}
@@ -0,0 +1,52 @@
+import Foundation
+
+class VMStorageLocal {
+  let baseURL: URL = Config.tartHomeDir.appendingPathComponent("vms", isDirectory: true)
+
+  private func vmURL(_ name: String) -> URL {
+    baseURL.appendingPathComponent(name, isDirectory: true)
+  }
+
+  func exists(_ name: String) -> Bool {
+    VMDirectory(baseURL: vmURL(name)).initialized
+  }
+
+  func open(_ name: String) throws -> VMDirectory {
+    let vmDir = VMDirectory(baseURL: vmURL(name))
+
+    try vmDir.validate()
+
+    return vmDir
+  }
+
+  func create(_ name: String, overwrite: Bool = false) throws -> VMDirectory {
+    let vmDir = VMDirectory(baseURL: vmURL(name))
+
+    try vmDir.initialize(overwrite: overwrite)
+
+    return vmDir
+  }
+
+  func delete(_ name: String) throws {
+    try FileManager.default.removeItem(at: vmURL(name))
+  }
+
+  func list() throws -> [(String, VMDirectory)] {
+    do {
+      return try FileManager.default.contentsOfDirectory(
+        at: baseURL,
+        includingPropertiesForKeys: [.isDirectoryKey],
+        options: .skipsSubdirectoryDescendants).map { url in
+        let vmDir = VMDirectory(baseURL: url)
+
+        return (vmDir.name, vmDir)
+      }
+    } catch {
+      if error.isFileNotFound() {
+        return []
+      }
+
+      throw error
+    }
+  }
+}
@@ -0,0 +1,101 @@
+import Foundation
+
+class VMStorageOCI {
+  let baseURL = Config.tartCacheDir.appendingPathComponent("OCIs", isDirectory: true)
+
+  private func vmURL(_ name: RemoteName) -> URL {
+    baseURL.appendingRemoteName(name)
+  }
+
+  func exists(_ name: RemoteName) -> Bool {
+    VMDirectory(baseURL: vmURL(name)).initialized
+  }
+
+  func open(_ name: RemoteName) throws -> VMDirectory {
+    let vmDir = VMDirectory(baseURL: vmURL(name))
+
+    try vmDir.validate()
+
+    return vmDir
+  }
+
+  func create(_ name: RemoteName, overwrite: Bool = false) throws -> VMDirectory {
+    let vmDir = VMDirectory(baseURL: vmURL(name))
+
+    try vmDir.initialize(overwrite: overwrite)
+
+    return vmDir
+  }
+
+  func delete(_ name: RemoteName) throws {
+    try FileManager.default.removeItem(at: vmURL(name))
+  }
+
+  func list() throws -> [(String, VMDirectory)] {
+    var result: [(String, VMDirectory)] = Array()
+
+    guard let enumerator = FileManager.default.enumerator(at: baseURL,
+      includingPropertiesForKeys: [.isSymbolicLinkKey], options: [.producesRelativePathURLs]) else {
+      return []
+    }
+
+    for case let foundURL as URL in enumerator {
+      let vmDir = VMDirectory(baseURL: foundURL)
+
+      if !vmDir.initialized {
+        continue
+      }
+
+      let parts = [foundURL.deletingLastPathComponent().relativePath, foundURL.lastPathComponent]
+      var name: String
+
+      if try foundURL.resourceValues(forKeys: [.isSymbolicLinkKey]).isSymbolicLink! {
+        name = parts.joined(separator: ":")
+      } else {
+        name = parts.joined(separator: "@")
+      }
+
+      result.append((name, vmDir))
+    }
+
+    return result
+  }
+
+  func pull(_ name: RemoteName, registry: Registry) async throws {
+    defaultLogger.appendNewLine("pulling manifest...")
+
+    let (manifest, manifestData) = try await registry.pullManifest(reference: name.reference)
+
+    // Create directory for manifest's digest
+    var digestName = name
+    digestName.reference = Digest.hash(manifestData)
+    if !exists(digestName) {
+      let vmDir = try create(digestName)
+      try await vmDir.pullFromRegistry(registry: registry, manifest: manifest)
+    } else {
+      defaultLogger.appendNewLine("\(digestName.reference) image is already cached! creating a symlink...")   
+    }
+
+    // Create directory for reference if it's different
+    if digestName != name {
+      // Overwrite the old symbolic link
+      if FileManager.default.fileExists(atPath: vmURL(name).path) {
+        try FileManager.default.removeItem(at: vmURL(name))
+      }
+
+      try FileManager.default.createSymbolicLink(at: vmURL(name), withDestinationURL: vmURL(digestName))
+    }
+  }
+}
+
+extension URL {
+  func appendingRemoteName(_ name: RemoteName) -> URL {
+    var result: URL = self
+
+    for pathComponent in (name.host + "/" + name.namespace + "/" + name.reference).split(separator: "/") {
+      result = result.appendingPathComponent(String(pathComponent))
+    }
+
+    return result
+  }
+}
@@ -0,0 +1,24 @@
+import XCTest
+@testable import tart
+
+final class DigestTests: XCTestCase {
+  func testEmptyData() throws {
+    let data = Data("".utf8)
+
+    let digest = Digest()
+    digest.update(data)
+    XCTAssertEqual(digest.finalize(), "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855")
+
+    XCTAssertEqual(Digest.hash(data), "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855")
+  }
+
+  func testNonEmptyData() throws {
+    let data = Data("The quick brown fox jumps over the lazy dog".utf8)
+
+    let digest = Digest()
+    digest.update(data)
+    XCTAssertEqual(digest.finalize(), "sha256:d7a8fbb307d7809469ca9abcb0082e4f8d5651e46d3cdb762d02d0bf37c9e592")
+
+    XCTAssertEqual(Digest.hash(data), "sha256:d7a8fbb307d7809469ca9abcb0082e4f8d5651e46d3cdb762d02d0bf37c9e592")
+  }
+}
@@ -0,0 +1,41 @@
+import XCTest
+@testable import tart
+
+final class RemoteNameTests: XCTestCase {
+  func testTag() throws {
+    let expectedRemoteName = RemoteName(host: "ghcr.io", namespace: "a/b", reference: "latest")
+
+    XCTAssertEqual(expectedRemoteName, try RemoteName("ghcr.io/a/b:latest"))
+  }
+
+  func testDigest() throws {
+    let expectedRemoteName = RemoteName(
+      host: "ghcr.io",
+      namespace: "a/b",
+      reference: "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    )
+
+    XCTAssertEqual(expectedRemoteName,
+      try RemoteName("ghcr.io/a/b@sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"))
+  }
+
+  func testASCIIOnly() throws {
+    // Only ASCII letters are supported
+    XCTAssertEqual(try? RemoteName("touché.fr/a/b:latest"), nil)
+    XCTAssertEqual(try? RemoteName("ghcr.io/tou/ché:latest"), nil)
+    XCTAssertEqual(try? RemoteName("ghcr.io/a/b:touché"), nil)
+  }
+
+  func testLocal() throws {
+    // Local image names (those that don't include a registry) are not supported
+    XCTAssertEqual(try? RemoteName("debian:latest"), nil)
+  }
+
+  func testPort() throws {
+    // Port is included in host
+    XCTAssertEqual(try RemoteName("127.0.0.1:8080/a/b").host, "127.0.0.1:8080")
+
+    // Port must be specified when ":" is used
+    XCTAssertEqual(try? RemoteName("127.0.0.1:/a/b").host, nil)
+  }
+}
@@ -0,0 +1,18 @@
+import XCTest
+@testable import tart
+
+final class URLAbsolutizationTets: XCTestCase {
+  func testNeedsAbsolutization() throws {
+    let url = URL(string: "/v2/some/path?some=query")!
+            .absolutize(URL(string: "https://example.com/v2/")!)
+
+    XCTAssertEqual(url.absoluteString, "https://example.com/v2/some/path?some=query")
+  }
+
+  func testDoesntNeedAbsolutization() throws {
+    let url = URL(string: "https://example.org/v2/some/path?some=query")!
+            .absolutize(URL(string: "https://example.com/v2/")!)
+
+    XCTAssertEqual(url.absoluteString, "https://example.org/v2/some/path?some=query")
+  }
+}
@@ -0,0 +1,41 @@
+import XCTest
+@testable import tart
+
+final class WWWAuthenticateTests: XCTestCase {
+  func testExample() throws {
+    // Test example from Token Authentication Specification[1]
+    //
+    // [1]: https://docs.docker.com/registry/spec/auth/token/
+    let wwwAuthenticate = try WWWAuthenticate(rawHeaderValue: "Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\",scope=\"repository:samalba/my-app:pull,push\"")
+
+    XCTAssertEqual("Bearer", wwwAuthenticate.scheme)
+    XCTAssertEqual([
+      "realm": "https://auth.docker.io/token",
+      "service": "registry.docker.io",
+      "scope": "repository:samalba/my-app:pull,push",
+    ], wwwAuthenticate.kvs)
+  }
+
+  func testBasic() throws {
+    let wwwAuthenticate = try WWWAuthenticate(rawHeaderValue: "Bearer a=b,c=\"d\"")
+
+    XCTAssertEqual("Bearer", wwwAuthenticate.scheme)
+    XCTAssertEqual(["a": "b", "c": "d"], wwwAuthenticate.kvs)
+  }
+
+  func testIncompleteHeader() throws {
+    XCTAssertThrowsError(try WWWAuthenticate(rawHeaderValue: "Whatever")) {
+      XCTAssertTrue($0 is RegistryError)
+    }
+
+    XCTAssertThrowsError(try WWWAuthenticate(rawHeaderValue: "Bearer ")) {
+      XCTAssertTrue($0 is RegistryError)
+    }
+  }
+
+  func testIncompleteDirective() throws {
+    XCTAssertThrowsError(try WWWAuthenticate(rawHeaderValue: "Bearer whatever")) {
+      XCTAssertTrue($0 is RegistryError)
+    }
+  }
+}
@@ -1,756 +0,0 @@
-/* cyrillic-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkC3kaWzU.woff2) format('woff2');
-  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
-}
-/* cyrillic */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkAnkaWzU.woff2) format('woff2');
-  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
-}
-/* greek-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCnkaWzU.woff2) format('woff2');
-  unicode-range: U+1F00-1FFF;
-}
-/* greek */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBXkaWzU.woff2) format('woff2');
-  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
-}
-/* math */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkenkaWzU.woff2) format('woff2');
-  unicode-range: U+0302-0303, U+0305, U+0307-0308, U+0310, U+0312, U+0315, U+031A, U+0326-0327, U+032C, U+032F-0330, U+0332-0333, U+0338, U+033A, U+0346, U+034D, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2016-2017, U+2034-2038, U+203C, U+2040, U+2043, U+2047, U+2050, U+2057, U+205F, U+2070-2071, U+2074-208E, U+2090-209C, U+20D0-20DC, U+20E1, U+20E5-20EF, U+2100-2112, U+2114-2115, U+2117-2121, U+2123-214F, U+2190, U+2192, U+2194-21AE, U+21B0-21E5, U+21F1-21F2, U+21F4-2211, U+2213-2214, U+2216-22FF, U+2308-230B, U+2310, U+2319, U+231C-2321, U+2336-237A, U+237C, U+2395, U+239B-23B7, U+23D0, U+23DC-23E1, U+2474-2475, U+25AF, U+25B3, U+25B7, U+25BD, U+25C1, U+25CA, U+25CC, U+25FB, U+266D-266F, U+27C0-27FF, U+2900-2AFF, U+2B0E-2B11, U+2B30-2B4C, U+2BFE, U+3030, U+FF5B, U+FF5D, U+1D400-1D7FF, U+1EE00-1EEFF;
-}
-/* symbols */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkaHkaWzU.woff2) format('woff2');
-  unicode-range: U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F610, U+1F650-1F67F, U+1F687, U+1F68D, U+1F691, U+1F694, U+1F698, U+1F6AD, U+1F6B2, U+1F6B9-1F6BA, U+1F6BC, U+1F6C6-1F6CF, U+1F6D3-1F6D7, U+1F6E0-1F6EA, U+1F6F0-1F6F3, U+1F6F7-1F6FC, U+1F700-1F7FF, U+1F800-1F80B, U+1F810-1F847, U+1F850-1F859, U+1F860-1F887, U+1F890-1F8AD, U+1F8B0-1F8BB, U+1F8C0-1F8C1, U+1F900-1F90B, U+1F93B, U+1F946, U+1F984, U+1F996, U+1F9E9, U+1FA00-1FA6F, U+1FA70-1FA7C, U+1FA80-1FA89, U+1FA8F-1FAC6, U+1FACE-1FADC, U+1FADF-1FAE9, U+1FAF0-1FAF8, U+1FB00-1FBFF;
-}
-/* vietnamese */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCXkaWzU.woff2) format('woff2');
-  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
-}
-/* latin-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCHkaWzU.woff2) format('woff2');
-  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
-}
-/* latin */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2) format('woff2');
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-}
-/* cyrillic-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkC3kaWzU.woff2) format('woff2');
-  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
-}
-/* cyrillic */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkAnkaWzU.woff2) format('woff2');
-  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
-}
-/* greek-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCnkaWzU.woff2) format('woff2');
-  unicode-range: U+1F00-1FFF;
-}
-/* greek */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBXkaWzU.woff2) format('woff2');
-  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
-}
-/* math */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkenkaWzU.woff2) format('woff2');
-  unicode-range: U+0302-0303, U+0305, U+0307-0308, U+0310, U+0312, U+0315, U+031A, U+0326-0327, U+032C, U+032F-0330, U+0332-0333, U+0338, U+033A, U+0346, U+034D, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2016-2017, U+2034-2038, U+203C, U+2040, U+2043, U+2047, U+2050, U+2057, U+205F, U+2070-2071, U+2074-208E, U+2090-209C, U+20D0-20DC, U+20E1, U+20E5-20EF, U+2100-2112, U+2114-2115, U+2117-2121, U+2123-214F, U+2190, U+2192, U+2194-21AE, U+21B0-21E5, U+21F1-21F2, U+21F4-2211, U+2213-2214, U+2216-22FF, U+2308-230B, U+2310, U+2319, U+231C-2321, U+2336-237A, U+237C, U+2395, U+239B-23B7, U+23D0, U+23DC-23E1, U+2474-2475, U+25AF, U+25B3, U+25B7, U+25BD, U+25C1, U+25CA, U+25CC, U+25FB, U+266D-266F, U+27C0-27FF, U+2900-2AFF, U+2B0E-2B11, U+2B30-2B4C, U+2BFE, U+3030, U+FF5B, U+FF5D, U+1D400-1D7FF, U+1EE00-1EEFF;
-}
-/* symbols */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkaHkaWzU.woff2) format('woff2');
-  unicode-range: U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F610, U+1F650-1F67F, U+1F687, U+1F68D, U+1F691, U+1F694, U+1F698, U+1F6AD, U+1F6B2, U+1F6B9-1F6BA, U+1F6BC, U+1F6C6-1F6CF, U+1F6D3-1F6D7, U+1F6E0-1F6EA, U+1F6F0-1F6F3, U+1F6F7-1F6FC, U+1F700-1F7FF, U+1F800-1F80B, U+1F810-1F847, U+1F850-1F859, U+1F860-1F887, U+1F890-1F8AD, U+1F8B0-1F8BB, U+1F8C0-1F8C1, U+1F900-1F90B, U+1F93B, U+1F946, U+1F984, U+1F996, U+1F9E9, U+1FA00-1FA6F, U+1FA70-1FA7C, U+1FA80-1FA89, U+1FA8F-1FAC6, U+1FACE-1FADC, U+1FADF-1FAE9, U+1FAF0-1FAF8, U+1FB00-1FBFF;
-}
-/* vietnamese */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCXkaWzU.woff2) format('woff2');
-  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
-}
-/* latin-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCHkaWzU.woff2) format('woff2');
-  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
-}
-/* latin */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2) format('woff2');
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-}
-/* cyrillic-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkC3kaWzU.woff2) format('woff2');
-  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
-}
-/* cyrillic */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkAnkaWzU.woff2) format('woff2');
-  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
-}
-/* greek-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCnkaWzU.woff2) format('woff2');
-  unicode-range: U+1F00-1FFF;
-}
-/* greek */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBXkaWzU.woff2) format('woff2');
-  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
-}
-/* math */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkenkaWzU.woff2) format('woff2');
-  unicode-range: U+0302-0303, U+0305, U+0307-0308, U+0310, U+0312, U+0315, U+031A, U+0326-0327, U+032C, U+032F-0330, U+0332-0333, U+0338, U+033A, U+0346, U+034D, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2016-2017, U+2034-2038, U+203C, U+2040, U+2043, U+2047, U+2050, U+2057, U+205F, U+2070-2071, U+2074-208E, U+2090-209C, U+20D0-20DC, U+20E1, U+20E5-20EF, U+2100-2112, U+2114-2115, U+2117-2121, U+2123-214F, U+2190, U+2192, U+2194-21AE, U+21B0-21E5, U+21F1-21F2, U+21F4-2211, U+2213-2214, U+2216-22FF, U+2308-230B, U+2310, U+2319, U+231C-2321, U+2336-237A, U+237C, U+2395, U+239B-23B7, U+23D0, U+23DC-23E1, U+2474-2475, U+25AF, U+25B3, U+25B7, U+25BD, U+25C1, U+25CA, U+25CC, U+25FB, U+266D-266F, U+27C0-27FF, U+2900-2AFF, U+2B0E-2B11, U+2B30-2B4C, U+2BFE, U+3030, U+FF5B, U+FF5D, U+1D400-1D7FF, U+1EE00-1EEFF;
-}
-/* symbols */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkaHkaWzU.woff2) format('woff2');
-  unicode-range: U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F610, U+1F650-1F67F, U+1F687, U+1F68D, U+1F691, U+1F694, U+1F698, U+1F6AD, U+1F6B2, U+1F6B9-1F6BA, U+1F6BC, U+1F6C6-1F6CF, U+1F6D3-1F6D7, U+1F6E0-1F6EA, U+1F6F0-1F6F3, U+1F6F7-1F6FC, U+1F700-1F7FF, U+1F800-1F80B, U+1F810-1F847, U+1F850-1F859, U+1F860-1F887, U+1F890-1F8AD, U+1F8B0-1F8BB, U+1F8C0-1F8C1, U+1F900-1F90B, U+1F93B, U+1F946, U+1F984, U+1F996, U+1F9E9, U+1FA00-1FA6F, U+1FA70-1FA7C, U+1FA80-1FA89, U+1FA8F-1FAC6, U+1FACE-1FADC, U+1FADF-1FAE9, U+1FAF0-1FAF8, U+1FB00-1FBFF;
-}
-/* vietnamese */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCXkaWzU.woff2) format('woff2');
-  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
-}
-/* latin-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCHkaWzU.woff2) format('woff2');
-  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
-}
-/* latin */
-@font-face {
-  font-family: 'Roboto';
-  font-style: italic;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2) format('woff2');
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-}
-/* cyrillic-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2) format('woff2');
-  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
-}
-/* cyrillic */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2) format('woff2');
-  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
-}
-/* greek-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2) format('woff2');
-  unicode-range: U+1F00-1FFF;
-}
-/* greek */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2) format('woff2');
-  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
-}
-/* math */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2) format('woff2');
-  unicode-range: U+0302-0303, U+0305, U+0307-0308, U+0310, U+0312, U+0315, U+031A, U+0326-0327, U+032C, U+032F-0330, U+0332-0333, U+0338, U+033A, U+0346, U+034D, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2016-2017, U+2034-2038, U+203C, U+2040, U+2043, U+2047, U+2050, U+2057, U+205F, U+2070-2071, U+2074-208E, U+2090-209C, U+20D0-20DC, U+20E1, U+20E5-20EF, U+2100-2112, U+2114-2115, U+2117-2121, U+2123-214F, U+2190, U+2192, U+2194-21AE, U+21B0-21E5, U+21F1-21F2, U+21F4-2211, U+2213-2214, U+2216-22FF, U+2308-230B, U+2310, U+2319, U+231C-2321, U+2336-237A, U+237C, U+2395, U+239B-23B7, U+23D0, U+23DC-23E1, U+2474-2475, U+25AF, U+25B3, U+25B7, U+25BD, U+25C1, U+25CA, U+25CC, U+25FB, U+266D-266F, U+27C0-27FF, U+2900-2AFF, U+2B0E-2B11, U+2B30-2B4C, U+2BFE, U+3030, U+FF5B, U+FF5D, U+1D400-1D7FF, U+1EE00-1EEFF;
-}
-/* symbols */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2) format('woff2');
-  unicode-range: U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F610, U+1F650-1F67F, U+1F687, U+1F68D, U+1F691, U+1F694, U+1F698, U+1F6AD, U+1F6B2, U+1F6B9-1F6BA, U+1F6BC, U+1F6C6-1F6CF, U+1F6D3-1F6D7, U+1F6E0-1F6EA, U+1F6F0-1F6F3, U+1F6F7-1F6FC, U+1F700-1F7FF, U+1F800-1F80B, U+1F810-1F847, U+1F850-1F859, U+1F860-1F887, U+1F890-1F8AD, U+1F8B0-1F8BB, U+1F8C0-1F8C1, U+1F900-1F90B, U+1F93B, U+1F946, U+1F984, U+1F996, U+1F9E9, U+1FA00-1FA6F, U+1FA70-1FA7C, U+1FA80-1FA89, U+1FA8F-1FAC6, U+1FACE-1FADC, U+1FADF-1FAE9, U+1FAF0-1FAF8, U+1FB00-1FBFF;
-}
-/* vietnamese */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2) format('woff2');
-  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
-}
-/* latin-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2) format('woff2');
-  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
-}
-/* latin */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 300;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2) format('woff2');
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-}
-/* cyrillic-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2) format('woff2');
-  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
-}
-/* cyrillic */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2) format('woff2');
-  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
-}
-/* greek-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2) format('woff2');
-  unicode-range: U+1F00-1FFF;
-}
-/* greek */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2) format('woff2');
-  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
-}
-/* math */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2) format('woff2');
-  unicode-range: U+0302-0303, U+0305, U+0307-0308, U+0310, U+0312, U+0315, U+031A, U+0326-0327, U+032C, U+032F-0330, U+0332-0333, U+0338, U+033A, U+0346, U+034D, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2016-2017, U+2034-2038, U+203C, U+2040, U+2043, U+2047, U+2050, U+2057, U+205F, U+2070-2071, U+2074-208E, U+2090-209C, U+20D0-20DC, U+20E1, U+20E5-20EF, U+2100-2112, U+2114-2115, U+2117-2121, U+2123-214F, U+2190, U+2192, U+2194-21AE, U+21B0-21E5, U+21F1-21F2, U+21F4-2211, U+2213-2214, U+2216-22FF, U+2308-230B, U+2310, U+2319, U+231C-2321, U+2336-237A, U+237C, U+2395, U+239B-23B7, U+23D0, U+23DC-23E1, U+2474-2475, U+25AF, U+25B3, U+25B7, U+25BD, U+25C1, U+25CA, U+25CC, U+25FB, U+266D-266F, U+27C0-27FF, U+2900-2AFF, U+2B0E-2B11, U+2B30-2B4C, U+2BFE, U+3030, U+FF5B, U+FF5D, U+1D400-1D7FF, U+1EE00-1EEFF;
-}
-/* symbols */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2) format('woff2');
-  unicode-range: U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F610, U+1F650-1F67F, U+1F687, U+1F68D, U+1F691, U+1F694, U+1F698, U+1F6AD, U+1F6B2, U+1F6B9-1F6BA, U+1F6BC, U+1F6C6-1F6CF, U+1F6D3-1F6D7, U+1F6E0-1F6EA, U+1F6F0-1F6F3, U+1F6F7-1F6FC, U+1F700-1F7FF, U+1F800-1F80B, U+1F810-1F847, U+1F850-1F859, U+1F860-1F887, U+1F890-1F8AD, U+1F8B0-1F8BB, U+1F8C0-1F8C1, U+1F900-1F90B, U+1F93B, U+1F946, U+1F984, U+1F996, U+1F9E9, U+1FA00-1FA6F, U+1FA70-1FA7C, U+1FA80-1FA89, U+1FA8F-1FAC6, U+1FACE-1FADC, U+1FADF-1FAE9, U+1FAF0-1FAF8, U+1FB00-1FBFF;
-}
-/* vietnamese */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2) format('woff2');
-  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
-}
-/* latin-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2) format('woff2');
-  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
-}
-/* latin */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 400;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2) format('woff2');
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-}
-/* cyrillic-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2) format('woff2');
-  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
-}
-/* cyrillic */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2) format('woff2');
-  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
-}
-/* greek-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2) format('woff2');
-  unicode-range: U+1F00-1FFF;
-}
-/* greek */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2) format('woff2');
-  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
-}
-/* math */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2) format('woff2');
-  unicode-range: U+0302-0303, U+0305, U+0307-0308, U+0310, U+0312, U+0315, U+031A, U+0326-0327, U+032C, U+032F-0330, U+0332-0333, U+0338, U+033A, U+0346, U+034D, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2016-2017, U+2034-2038, U+203C, U+2040, U+2043, U+2047, U+2050, U+2057, U+205F, U+2070-2071, U+2074-208E, U+2090-209C, U+20D0-20DC, U+20E1, U+20E5-20EF, U+2100-2112, U+2114-2115, U+2117-2121, U+2123-214F, U+2190, U+2192, U+2194-21AE, U+21B0-21E5, U+21F1-21F2, U+21F4-2211, U+2213-2214, U+2216-22FF, U+2308-230B, U+2310, U+2319, U+231C-2321, U+2336-237A, U+237C, U+2395, U+239B-23B7, U+23D0, U+23DC-23E1, U+2474-2475, U+25AF, U+25B3, U+25B7, U+25BD, U+25C1, U+25CA, U+25CC, U+25FB, U+266D-266F, U+27C0-27FF, U+2900-2AFF, U+2B0E-2B11, U+2B30-2B4C, U+2BFE, U+3030, U+FF5B, U+FF5D, U+1D400-1D7FF, U+1EE00-1EEFF;
-}
-/* symbols */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2) format('woff2');
-  unicode-range: U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F610, U+1F650-1F67F, U+1F687, U+1F68D, U+1F691, U+1F694, U+1F698, U+1F6AD, U+1F6B2, U+1F6B9-1F6BA, U+1F6BC, U+1F6C6-1F6CF, U+1F6D3-1F6D7, U+1F6E0-1F6EA, U+1F6F0-1F6F3, U+1F6F7-1F6FC, U+1F700-1F7FF, U+1F800-1F80B, U+1F810-1F847, U+1F850-1F859, U+1F860-1F887, U+1F890-1F8AD, U+1F8B0-1F8BB, U+1F8C0-1F8C1, U+1F900-1F90B, U+1F93B, U+1F946, U+1F984, U+1F996, U+1F9E9, U+1FA00-1FA6F, U+1FA70-1FA7C, U+1FA80-1FA89, U+1FA8F-1FAC6, U+1FACE-1FADC, U+1FADF-1FAE9, U+1FAF0-1FAF8, U+1FB00-1FBFF;
-}
-/* vietnamese */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2) format('woff2');
-  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
-}
-/* latin-ext */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2) format('woff2');
-  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
-}
-/* latin */
-@font-face {
-  font-family: 'Roboto';
-  font-style: normal;
-  font-weight: 700;
-  font-stretch: 100%;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2) format('woff2');
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-}
-/* cyrillic-ext */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm3CWWoKC.woff2) format('woff2');
-  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
-}
-/* cyrillic */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm3mWWoKC.woff2) format('woff2');
-  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
-}
-/* greek */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm36WWoKC.woff2) format('woff2');
-  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
-}
-/* vietnamese */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm3KWWoKC.woff2) format('woff2');
-  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
-}
-/* latin-ext */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm3OWWoKC.woff2) format('woff2');
-  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
-}
-/* latin */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm32WWg.woff2) format('woff2');
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-}
-/* cyrillic-ext */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm3CWWoKC.woff2) format('woff2');
-  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
-}
-/* cyrillic */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm3mWWoKC.woff2) format('woff2');
-  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
-}
-/* greek */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm36WWoKC.woff2) format('woff2');
-  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
-}
-/* vietnamese */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm3KWWoKC.woff2) format('woff2');
-  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
-}
-/* latin-ext */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm3OWWoKC.woff2) format('woff2');
-  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
-}
-/* latin */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: italic;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x7DF4xlVMF-BfR8bXMIjhOm32WWg.woff2) format('woff2');
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-}
-/* cyrillic-ext */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhGq3-OXg.woff2) format('woff2');
-  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
-}
-/* cyrillic */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhPq3-OXg.woff2) format('woff2');
-  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
-}
-/* greek */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhIq3-OXg.woff2) format('woff2');
-  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
-}
-/* vietnamese */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhEq3-OXg.woff2) format('woff2');
-  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
-}
-/* latin-ext */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhFq3-OXg.woff2) format('woff2');
-  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
-}
-/* latin */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 400;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhLq38.woff2) format('woff2');
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-}
-/* cyrillic-ext */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhGq3-OXg.woff2) format('woff2');
-  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
-}
-/* cyrillic */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhPq3-OXg.woff2) format('woff2');
-  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
-}
-/* greek */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhIq3-OXg.woff2) format('woff2');
-  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
-}
-/* vietnamese */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhEq3-OXg.woff2) format('woff2');
-  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
-}
-/* latin-ext */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhFq3-OXg.woff2) format('woff2');
-  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
-}
-/* latin */
-@font-face {
-  font-family: 'Roboto Mono';
-  font-style: normal;
-  font-weight: 700;
-  font-display: fallback;
-  src: url(../fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhLq38.woff2) format('woff2');
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-}
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Fedor Korotkov	efc9c74b6c	Report if an image already pulled (#52 )	2022-05-06 17:06:28 -04:00
Fedor KorotkovandNikolay Edigaryev	f712ba8ce3	Proper documentation (#49 ) * WIP proper docs * Update README.md * wip * More updates * Apply suggestions from code review Co-authored-by: Nikolay Edigaryev <edigaryev@gmail.com> * Use GitHub Packages links * Promote Cirrus CLI first and then mentioned Cirrus CI * Apply suggestions from code review Co-authored-by: Nikolay Edigaryev <edigaryev@gmail.com> Co-authored-by: Nikolay Edigaryev <edigaryev@gmail.com>	2022-05-06 23:59:33 +03:00
Nikolay Edigaryev	4a60c41dd3	Registry: provide response body on auth token request failure (#51 ) * Registry: provide response body on auth token request failure * Clone.swift: fix typo	2022-05-06 14:19:27 -04:00
Fedor Korotkov	f20a98bf01	Smart generation of new MAC addresses (#45 ) * Introduce --new-mac-address flag for Clone command Related to https://github.com/cirruslabs/tart/issues/20#issuecomment-1116732505 * Smart generation of new MAC addresses	2022-05-06 20:38:56 +03:00
Nikolay Edigaryev	d5e3a7718e	Registry: suport pulling public images (#50 )	2022-05-06 20:30:04 +03:00
Nikolay Edigaryev	a4db60d656	Registry: don't loose query parameters on URL absolutization (#47 ) * Registry: don't loose query parameters on URL absolutization * Registry: throw a proper exception when Location header parsing fails	2022-05-06 09:03:58 -04:00
Fedor Korotkov	29e08220e4	Get OCI credentials only when needed (#46 ) So we don't even request them for a public image	2022-05-06 02:12:38 +03:00
Fedor Korotkov	cdf4932aa3	Improved logging a bit (#43 ) * Improved logging a bit * Progress for all bytes	2022-05-05 10:43:09 -04:00
Nikolay Edigaryev	95316c0d67	Support pulling/pushing VMs to OCI-compatible registries (#32 ) * Support pulling/pushing VMs to OCI-compatible registries * Registry: rename request() to endpointRequest() for clarity * Registry: include JSON details on HTTP status code mismatch errors * .cirrus.yml: run tests * Fix testDigest * Registry: set Content-{Length,Type} headers when pushing blob * Refactor Registry.auth() and enrich RegistryError.AuthFailed * Remove useless comment * Fix WWWAuthenticate a bit and add tests * WWWAuthenticate: expect a Bearer scheme * Registry.auth(): document the passing of ["scope", "service"] parameters * Clarify unexpected HTTP code error when retrieving auth token * Make RemoteName parser more relaxed for now * tart clone: pull the VM if it's OCI-based first * VMStorageOCI: ensure the old symbolic link is overwritten * tart push: support multiple remote VM names * Logging: push/pull progress * Use 500 MB chunks (instead of 500 MiB) to evenly cut disk ...which also uses powers of 10. * Credentials: only read credentials labeled "Tart Credentials"	2022-05-03 14:30:26 -04:00
Fedor Korotkov	4a5efefbc9	Embed AppIcon.png within binary (#30 ) * Build product explicitly Without it resources are not embedded in the executable * Embed icon in code	2022-04-22 10:29:52 +03:00
Fedor Korotkov	f07ffed6c8	--wait option for IP command (#29 )	2022-04-19 19:56:59 +03:00
fedor	4ca7787958	Added config release	2022-04-18 11:44:29 -04:00
Fedor Korotkov	8b5b0536b7	Fixed env variable name	2022-04-18 11:24:42 -04:00
Fedor Korotkov	d55e5457f9	Make the disk size configurable upon creation (#26 ) * Make the disk size configurable upon creation I haven't found a way to make a VM aware of a larger disk size. So I didn't add `--disk-size` option to `set` command. * Fixed size so it's pretty in the UI * Hidden option to resize disk for testing	2022-04-18 17:46:19 +03:00
Fedor Korotkov	609a2530dd	Use GoReleaser for releases (#27 )	2022-04-18 16:33:10 +03:00
Fedor Korotkov	ad2db1461f	Update App Icon (#28 )	2022-04-17 13:52:54 +03:00
Fedor Korotkov	cc31388c1b	Renamed disk file (#24 ) .img is a standard extension for disk images on macOS. With this extension clicking on the file in finder it will be open in Dick Utilities for inspection.	2022-04-14 22:49:38 +03:00
Fedor Korotkov	e100cc0d7f	Add App Icon (#23 )	2022-04-14 13:23:21 -04:00
Fedor Korotkov	75b5d63387	Refactored UI (#22 ) * Simplified crafting of a VM config * Configure display * Propagate VM name to the title	2022-04-13 16:42:27 -04:00
Nikolay Edigaryev	466c3c568a	Add ability to modify VM's configuration (number of CPUs and memory size) (#16 ) * VMConfig: store minimum CPU count and memory size separately * Add ability to modify VM's configuration * Enforce minimum CPU and memory requirements * VMConfig: remove migration logic	2022-04-11 13:39:34 +03:00
Fedor Korotkov	9f8d3017d9	Handle incomplete MAC address (#15 )	2022-03-29 12:07:03 -04:00
Fedor Korotkov	49d430b3c4	Update dependencies and styles (#12 ) * Update deps and .editorconfig * run config	2022-03-24 18:54:49 +03:00
Fedor Korotkov	dc1e502404	Logger (#11 ) * Log progress * ProgressObserver * Reverted run configuration * Cache .ipsw files Use fraction * Use datatask and pre-create cache folder	2022-03-22 22:17:23 -04:00
Fedor Korotkov	483627904c	Swift package simplified (#7 ) * Convert project to a Swift Package * SwiftEntitlementsPlugin * Include .swiftpm * Removed plugin * Run configuration to run signed binary * Cirrus CI Configuration * Fixed worker label	2022-03-07 11:46:49 -05:00
Fedor Korotkov	dd40717c04	Create LICENSE (#10 )	2022-03-07 11:46:29 -05:00
Nikolay Edigaryev	13f2366754	Add ability to clone VMs (#9 )	2022-02-23 23:45:21 +03:00
Nikolay Edigaryev	7a67deab81	Introduce "tart ip" command to retrieve a VM's IP address (#8 ) * Introduce "tart ip" command to retrieve a VM's IP address * VM running hint	2022-02-22 23:11:33 +03:00
Nikolay Edigaryev	2c7217f5a8	Merge pull request #1 from cirruslabs/basic-implementation Basic CLI implementation that wraps Virtualization.Framework	2022-02-14 20:56:19 +05:00
Nikolay Edigaryev	8375e3cf7a	{cpuCount,memorySize}min → {cpuCount,memorySize}	2022-02-14 16:57:54 +03:00
Nikolay Edigaryev	6fc868e3ba	VMDirectory: use file extensions for config, disk and nvram	2022-02-14 16:55:28 +03:00
Nikolay Edigaryev	348d977f09	VMConfig: save pretty-printed JSON	2022-02-14 16:54:36 +03:00
Nikolay Edigaryev	09a8109f4b	Basic CLI implementation that wraps Virtualization.Framework	2022-02-11 17:38:31 +03:00
fedor	28ee76491a	Added README.md	2022-02-06 17:31:54 -05:00