@alchemy.run/kubernetes 0.0.0 → 2.0.0-beta.85

package/lib/HelmChart.d.ts

@@ -0,0 +1,147 @@
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as FileSystem from "effect/FileSystem";
+import { type ClusterLike, type Connection } from "./Connection.ts";
+import { type KubernetesObjectRef } from "./Objects.ts";
+import type { Providers } from "./Providers.ts";
+export interface HelmChartProps {
+    /**
+     * Target cluster the chart's objects are applied onto. Pass a managed
+     * cluster resource (e.g. `AWS.EKS.Cluster`), a
+     * `Kubernetes.KubeConfig(...)`, or a raw `Kubernetes.Connection`.
+     */
+    cluster: ClusterLike;
+    /**
+     * Chart reference: a repository chart name (used with {@link repo}, e.g.
+     * `"ingress-nginx"`), an `oci://` registry reference, or a local chart
+     * directory path.
+     */
+    chart: string;
+    /**
+     * Classic chart repository URL, e.g.
+     * `https://kubernetes.github.io/ingress-nginx`. Not needed for `oci://`
+     * references or local chart directories.
+     */
+    repo?: string;
+    /**
+     * Chart version to render. Pin this for repository/OCI charts — without
+     * it, helm resolves the latest version at each deploy and the rendered
+     * objects can drift between runs. Ignored for local chart directories.
+     */
+    version?: string;
+    /**
+     * Helm release name the chart's templates render with
+     * (`.Release.Name`). If omitted, a deterministic name is derived from
+     * the stack, stage, and logical ID.
+     */
+    releaseName?: string;
+    /**
+     * Kubernetes namespace the objects are rendered into
+     * (`.Release.Namespace`; also injected as `metadata.namespace` on
+     * namespaced objects the chart leaves namespace-less). The namespace
+     * must already exist unless {@link createNamespace} is set.
+     * @default "default"
+     */
+    namespace?: string;
+    /**
+     * Values passed to the chart — a literal object, the same shape as a
+     * `values.yaml` file.
+     */
+    values?: Record<string, unknown>;
+    /**
+     * Render objects from the chart's `crds/` directory too.
+     * @default true
+     */
+    includeCrds?: boolean;
+    /**
+     * Create the target Namespace and track it while this flag stays on.
+     * Turning it off leaves the Namespace in the cluster.
+     * @default false
+     */
+    createNamespace?: boolean;
+}
+export interface HelmChart extends Resource<"Kubernetes.HelmChart", HelmChartProps, {
+    /** The connection of the cluster the chart is applied to. */
+    connection: Connection;
+    /** The Helm release name the chart rendered with. */
+    releaseName: string;
+    /** The namespace the chart rendered into. */
+    namespace: string;
+    /** The chart reference that was rendered. */
+    chart: string;
+    /** The pinned chart version, when one was declared. */
+    version: string | undefined;
+    /** References to the applied Kubernetes objects. */
+    objects: KubernetesObjectRef[];
+    /** Content hash of the chart inputs (and local chart files). */
+    code: {
+        hash: string;
+    };
+    /**
+     * Set by `read` when an applied object is missing or its fingerprint
+     * changed. Reconcile does not persist it; the extra field is what
+     * `alchemy drift` compares.
+     */
+    observedHash?: string;
+}, {}, Providers> {
+}
+/**
+ * Renders a Helm chart and converges its objects onto any Kubernetes
+ * cluster via server-side apply.
+ *
+ * The chart is rendered locally with the `helm` CLI (`helm template` —
+ * install helm on the deploying machine, like Docker for image builds);
+ * the rendered objects then flow through the same apply machinery as
+ * `Kubernetes.Manifest`: Alchemy owns the object lifecycle, re-applies the
+ * full render whenever the chart's inputs change, prunes objects that drop
+ * out of the render, and deletes everything on destroy. There is no
+ * in-cluster Helm release record; the target `cluster` can be a managed
+ * cluster resource (e.g. `AWS.EKS.Cluster`) or any cluster your kubeconfig
+ * can reach.
+ *
+ * Helm lifecycle hooks (`helm.sh/hook`-annotated objects: install/upgrade/
+ * delete hooks, tests) are neither executed nor applied — the chart is
+ * rendered with `--no-hooks`, so they never enter the managed-object graph.
+ * Charts that depend on hooks for correctness should be installed with Helm
+ * directly.
+ * ### Installing a Chart
+ * **Example:** Chart from a repository
+ * ```typescript
+ * const ingress = yield* Kubernetes.HelmChart("IngressNginx", {
+ *   cluster,
+ *   chart: "ingress-nginx",
+ *   repo: "https://kubernetes.github.io/ingress-nginx",
+ *   version: "4.11.2",
+ *   namespace: "ingress-nginx",
+ *   createNamespace: true,
+ *   values: {
+ *     controller: { replicaCount: 2 },
+ *   },
+ * });
+ * ```
+ *
+ * **Example:** OCI chart
+ * ```typescript
+ * const karpenter = yield* Kubernetes.HelmChart("Karpenter", {
+ *   cluster,
+ *   chart: "oci://public.ecr.aws/karpenter/karpenter",
+ *   version: "1.0.6",
+ *   namespace: "kube-system",
+ * });
+ * ```
+ *
+ * **Example:** Local chart directory
+ * ```typescript
+ * const app = yield* Kubernetes.HelmChart("App", {
+ *   cluster,
+ *   chart: "./charts/app",
+ *   values: { image: { tag: "v1.2.3" } },
+ * });
+ * ```
+ *
+ * @resource
+ * @product Helm
+ */
+export declare const HelmChart: import("alchemy/Resource").ResourceClass<HelmChart>;
+export declare const HelmChartProvider: () => import("effect/Layer").Layer<Provider.Provider<HelmChart>, never, import("effect/process/ChildProcessSpawner").ChildProcessSpawner | FileSystem.FileSystem | import("effect/Path").Path | import("alchemy/Stack").Stack | import("alchemy/Stage").Stage>;
+//# sourceMappingURL=HelmChart.d.ts.map

package/lib/HelmChart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HelmChart.d.ts","sourceRoot":"","sources":["../src/HelmChart.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAI5C,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAUhD,OAAO,EAAgB,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlF,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,OAAO,EAAE,WAAW,CAAC;IACrB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,SAAU,SAAQ,QAAQ,CACzC,sBAAsB,EACtB,cAAc,EACd;IACE,6DAA6D;IAC7D,UAAU,EAAE,UAAU,CAAC;IACvB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,oDAAoD;IACpD,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,gEAAgE;IAChE,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,EACD,EAAE,EACF,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,eAAO,MAAM,SAAS,qDAEpB,CAAC;AA0FH,eAAO,MAAM,iBAAiB,gQAyH3B,CAAC"}

package/lib/HelmChart.js

@@ -0,0 +1,248 @@
+import { hashDirectory } from "alchemy/Command/Memo";
+import { isResolved } from "alchemy/Diff";
+import { createPhysicalName } from "alchemy/PhysicalName";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import { collectRedactedSecrets } from "alchemy/Util/Redaction";
+import { sha256Object } from "alchemy/Util/sha256";
+import * as Effect from "effect/Effect";
+import * as FileSystem from "effect/FileSystem";
+import { connectCluster, deleteObjects, ifClusterExists, readObject, reconcileObjects, resolveKindSpec, } from "./Client.js";
+import { toConnection } from "./Connection.js";
+import { hashDriftSelection } from "./internal/declared.js";
+import { renderHelmChart } from "./internal/helm.js";
+import { connectionIdentity, connectionOfOutput, tryConnectionOf } from "./internal/workload.js";
+import { kubernetesObjectKey, } from "./Objects.js";
+/**
+ * Renders a Helm chart and converges its objects onto any Kubernetes
+ * cluster via server-side apply.
+ *
+ * The chart is rendered locally with the `helm` CLI (`helm template` —
+ * install helm on the deploying machine, like Docker for image builds);
+ * the rendered objects then flow through the same apply machinery as
+ * `Kubernetes.Manifest`: Alchemy owns the object lifecycle, re-applies the
+ * full render whenever the chart's inputs change, prunes objects that drop
+ * out of the render, and deletes everything on destroy. There is no
+ * in-cluster Helm release record; the target `cluster` can be a managed
+ * cluster resource (e.g. `AWS.EKS.Cluster`) or any cluster your kubeconfig
+ * can reach.
+ *
+ * Helm lifecycle hooks (`helm.sh/hook`-annotated objects: install/upgrade/
+ * delete hooks, tests) are neither executed nor applied — the chart is
+ * rendered with `--no-hooks`, so they never enter the managed-object graph.
+ * Charts that depend on hooks for correctness should be installed with Helm
+ * directly.
+ * ### Installing a Chart
+ * **Example:** Chart from a repository
+ * ```typescript
+ * const ingress = yield* Kubernetes.HelmChart("IngressNginx", {
+ *   cluster,
+ *   chart: "ingress-nginx",
+ *   repo: "https://kubernetes.github.io/ingress-nginx",
+ *   version: "4.11.2",
+ *   namespace: "ingress-nginx",
+ *   createNamespace: true,
+ *   values: {
+ *     controller: { replicaCount: 2 },
+ *   },
+ * });
+ * ```
+ *
+ * **Example:** OCI chart
+ * ```typescript
+ * const karpenter = yield* Kubernetes.HelmChart("Karpenter", {
+ *   cluster,
+ *   chart: "oci://public.ecr.aws/karpenter/karpenter",
+ *   version: "1.0.6",
+ *   namespace: "kube-system",
+ * });
+ * ```
+ *
+ * **Example:** Local chart directory
+ * ```typescript
+ * const app = yield* Kubernetes.HelmChart("App", {
+ *   cluster,
+ *   chart: "./charts/app",
+ *   values: { image: { tag: "v1.2.3" } },
+ * });
+ * ```
+ *
+ * @resource
+ * @product Helm
+ */
+export const HelmChart = Resource("Kubernetes.HelmChart", {
+    aliases: ["AWS.EKS.HelmChart"],
+});
+/**
+ * Hash the chart identity: every render input, plus the chart directory's
+ * content hash when `chart` is a local path (so editing a local chart is
+ * visible to `diff` even though no prop changed).
+ */
+const computeChartHash = Effect.fn(function* (news, releaseName) {
+    const fs = yield* FileSystem.FileSystem;
+    const isLocalDir = !news.chart.startsWith("oci://") && (yield* fs.exists(news.chart));
+    return yield* sha256Object({
+        chart: news.chart,
+        repo: news.repo,
+        version: news.version,
+        releaseName,
+        namespace: news.namespace ?? "default",
+        values: news.values,
+        includeCrds: news.includeCrds ?? true,
+        createNamespace: news.createNamespace ?? false,
+        localChart: isLocalDir ? yield* hashDirectory({ cwd: news.chart }) : undefined,
+    });
+});
+const resolveReleaseName = (id, news, output) => Effect.suspend(() => {
+    if (news.releaseName)
+        return Effect.succeed(news.releaseName);
+    if (output?.releaseName)
+        return Effect.succeed(output.releaseName);
+    // Helm rejects release names longer than 53 characters.
+    return createPhysicalName({ id, maxLength: 53, lowercase: true });
+});
+/**
+ * Charts commonly omit `metadata.namespace` and rely on the install
+ * namespace. Server-side apply addresses objects by explicit path, so
+ * inject the target namespace into namespaced objects that omit it
+ * (resolving each kind's scope; cluster-scoped objects pass through).
+ */
+const injectNamespace = Effect.fn(function* (transport, objects, namespace) {
+    return yield* Effect.forEach(objects, (object) => Effect.gen(function* () {
+        if (object.metadata.namespace !== undefined)
+            return object;
+        const spec = yield* resolveKindSpec({ transport, input: object });
+        if (spec.scope === "Cluster")
+            return object;
+        return {
+            ...object,
+            metadata: { ...object.metadata, namespace },
+        };
+    }));
+});
+const chartObjects = Effect.fn(function* (transport, props, releaseName) {
+    const namespace = props.namespace ?? "default";
+    const redactions = props.values === undefined ? [] : collectRedactedSecrets(props.values);
+    const rendered = yield* renderHelmChart({
+        chart: props.chart,
+        repo: props.repo,
+        version: props.version,
+        releaseName,
+        namespace,
+        values: props.values,
+        includeCrds: props.includeCrds,
+    });
+    const placed = yield* injectNamespace(transport, rendered, namespace);
+    const objects = props.createNamespace && namespace !== "default"
+        ? [
+            {
+                apiVersion: "v1",
+                kind: "Namespace",
+                metadata: { name: namespace },
+            },
+            ...placed,
+        ]
+        : placed;
+    return { objects, redactions };
+});
+export const HelmChartProvider = () => Provider.effect(HelmChart, Effect.gen(function* () {
+    return {
+        stables: ["connection", "releaseName", "namespace"],
+        // In-cluster objects have no cloud-side enumeration that attributes
+        // them to alchemy; refresh happens per-instance through `read`.
+        list: () => Effect.succeed([]),
+        diff: Effect.fn(function* ({ id, olds, news, output }) {
+            if (!isResolved(news))
+                return;
+            const releaseName = yield* resolveReleaseName(id, news, output);
+            const oldCluster = connectionIdentity(tryConnectionOf(olds?.cluster));
+            const newCluster = connectionIdentity(tryConnectionOf(news.cluster));
+            // Object identity is the (cluster, release, namespace) triple —
+            // moving any of it means a different set of objects.
+            if (output &&
+                ((oldCluster !== undefined && newCluster !== undefined && oldCluster !== newCluster) ||
+                    output.releaseName !== releaseName ||
+                    output.namespace !== (news.namespace ?? "default"))) {
+                return { action: "replace" };
+            }
+            if (output) {
+                const hash = yield* computeChartHash(news, releaseName);
+                if (hash !== output.code.hash) {
+                    return { action: "update" };
+                }
+            }
+        }),
+        reconcile: Effect.fn(function* ({ id, news, olds, output, session }) {
+            const releaseName = yield* resolveReleaseName(id, news, output);
+            const namespace = news.namespace ?? "default";
+            const connection = toConnection(news.cluster);
+            const transport = yield* connectCluster(connection);
+            const hash = yield* computeChartHash(news, releaseName);
+            yield* session.note(`Rendering Helm chart ${news.chart}${news.version ? `@${news.version}` : ""}...`);
+            const { objects: desiredObjects, redactions } = yield* chartObjects(transport, news, releaseName);
+            yield* session.note(`Applying ${String(desiredObjects.length)} objects from ${news.chart}...`);
+            // Turning createNamespace off releases the Namespace. It stays in the cluster.
+            const previousObjects = (output?.objects ?? []).filter((object) => !(olds?.createNamespace === true &&
+                news.createNamespace !== true &&
+                object.kind === "Namespace" &&
+                object.name === namespace));
+            const objects = yield* reconcileObjects({
+                transport,
+                previousObjects,
+                desiredObjects,
+                redactions,
+            });
+            return {
+                connection,
+                releaseName,
+                namespace,
+                chart: news.chart,
+                version: news.version,
+                objects: [...objects],
+                code: { hash },
+            };
+        }),
+        read: Effect.fn(function* ({ output }) {
+            if (!output)
+                return undefined;
+            const connection = connectionOfOutput(output);
+            if (!connection)
+                return undefined;
+            // ClusterNotFound fails the drift row. undefined means an object is gone.
+            // GETs only: a dry-run PATCH needs `patch`, and re-rendering a chart
+            // rerolls randAlphaNum into a false drift.
+            const transport = yield* connectCluster(connection);
+            const notes = yield* Effect.forEach(output.objects, (object) => Effect.gen(function* () {
+                const key = kubernetesObjectKey(object);
+                const observed = yield* readObject({ transport, object }).pipe(Effect.catchTag("KubernetesNotFound", () => Effect.undefined));
+                if (!observed)
+                    return `missing:${key}`;
+                // Older rows stored no selection. Re-rendering the chart is
+                // not a read, so only a missing object is drift until apply
+                // writes a mask.
+                if (object.driftMask === undefined || object.baselineHash === undefined) {
+                    return undefined;
+                }
+                const liveHash = yield* hashDriftSelection(object.driftMask, observed);
+                return liveHash === object.baselineHash ? undefined : liveHash;
+            }), { concurrency: 8 });
+            const drifted = notes.filter((note) => note !== undefined);
+            if (drifted.length === 0)
+                return output;
+            return {
+                ...output,
+                observedHash: yield* sha256Object({ notes: drifted }),
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            const connection = connectionOfOutput(output);
+            if (!connection)
+                return;
+            const transport = yield* ifClusterExists(connectCluster(connection));
+            if (!transport)
+                return;
+            yield* deleteObjects({ transport, objects: output.objects });
+        }),
+    };
+}));
+//# sourceMappingURL=HelmChart.js.map

package/lib/HelmChart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HelmChart.js","sourceRoot":"","sources":["../src/HelmChart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,cAAc,EACd,aAAa,EACb,eAAe,EACf,UAAU,EACV,gBAAgB,EAChB,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAqC,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACjG,OAAO,EACL,mBAAmB,GAGpB,MAAM,cAAc,CAAC;AA2FtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAY,sBAAsB,EAAE;IACnE,OAAO,EAAE,CAAC,mBAAmB,CAAC;CAC/B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAoB,EAAE,WAAmB;IACrF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,SAAS;QACtC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,KAAK;QAC9C,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC/E,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,EAAU,EACV,IAAoB,EACpB,MAA2C,EAC3C,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;IAClB,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9D,IAAI,MAAM,EAAE,WAAW;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnE,wDAAwD;IACxD,OAAO,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEL;;;;;GAKG;AACH,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACzC,SAA2B,EAC3B,OAAkD,EAClD,SAAiB;IAEjB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAC5C,OAAO;YACL,GAAG,MAAM;YACT,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE;SACP,CAAC;IACzC,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACtC,SAA2B,EAC3B,KAAqB,EACrB,WAAmB;IAEnB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;IAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;QACtC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW;QACX,SAAS;QACT,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACtE,MAAM,OAAO,GACX,KAAK,CAAC,eAAe,IAAI,SAAS,KAAK,SAAS;QAC9C,CAAC,CAAC;YACE;gBACE,UAAU,EAAE,IAAI;gBAChB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aACO;YACtC,GAAG,MAAM;SACV;QACH,CAAC,CAAC,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CACpC,QAAQ,CAAC,MAAM,CACb,SAAS,EACT,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,WAAW,CAAC;QACnD,oEAAoE;QACpE,gEAAgE;QAChE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAA+B,CAAC;QAC3D,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAChE,MAAM,UAAU,GAAG,kBAAkB,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACtE,MAAM,UAAU,GAAG,kBAAkB,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACrE,gEAAgE;YAChE,qDAAqD;YACrD,IACE,MAAM;gBACN,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,UAAU,CAAC;oBAClF,MAAM,CAAC,WAAW,KAAK,WAAW;oBAClC,MAAM,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,EACrD,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;gBACxD,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC9B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;gBACvC,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACjE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAChE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;YAC9C,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAExD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,wBAAwB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CACjF,CAAC;YACF,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC,YAAY,CACjE,SAAS,EACT,IAAI,EACJ,WAAW,CACZ,CAAC;YAEF,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,YAAY,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,KAAK,KAAK,CAC1E,CAAC;YACF,+EAA+E;YAC/E,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CACpD,CAAC,MAAM,EAAE,EAAE,CACT,CAAC,CACC,IAAI,EAAE,eAAe,KAAK,IAAI;gBAC9B,IAAI,CAAC,eAAe,KAAK,IAAI;gBAC7B,MAAM,CAAC,IAAI,KAAK,WAAW;gBAC3B,MAAM,CAAC,IAAI,KAAK,SAAS,CAC1B,CACJ,CAAC;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;gBACtC,SAAS;gBACT,eAAe;gBACf,cAAc;gBACd,UAAU;aACX,CAAC,CAAC;YAEH,OAAO;gBACL,UAAU;gBACV,WAAW;gBACX,SAAS;gBACT,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;gBACrB,IAAI,EAAE,EAAE,IAAI,EAAE;aACf,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,UAAU;gBAAE,OAAO,SAAS,CAAC;YAClC,0EAA0E;YAC1E,qEAAqE;YACrE,2CAA2C;YAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACjC,MAAM,CAAC,OAAO,EACd,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAC9D,CAAC;gBACF,IAAI,CAAC,QAAQ;oBAAE,OAAO,WAAW,GAAG,EAAE,CAAC;gBACvC,4DAA4D;gBAC5D,4DAA4D;gBAC5D,iBAAiB;gBACjB,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACxE,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACvE,OAAO,QAAQ,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YACjE,CAAC,CAAC,EACJ,EAAE,WAAW,EAAE,CAAC,EAAE,CACnB,CAAC;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC;YACxC,OAAO;gBACL,GAAG,MAAM;gBACT,YAAY,EAAE,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;aACtD,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,UAAU;gBAAE,OAAO;YACxB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}