@caelo-cms/provisioning 0.11.9 → 0.11.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/adapter.d.ts +6 -0
- package/dist/adapter.d.ts.map +1 -1
- package/dist/admin-domain.d.ts +10 -1
- package/dist/admin-domain.d.ts.map +1 -1
- package/dist/admin-domain.js +13 -3
- package/dist/admin-domain.js.map +1 -1
- package/dist/adopt-existing.d.ts +12 -3
- package/dist/adopt-existing.d.ts.map +1 -1
- package/dist/adopt-existing.js +143 -0
- package/dist/adopt-existing.js.map +1 -1
- package/dist/agent/command.d.ts +23 -0
- package/dist/agent/command.d.ts.map +1 -1
- package/dist/agent/command.js +32 -9
- package/dist/agent/command.js.map +1 -1
- package/dist/agent/run.d.ts +2 -0
- package/dist/agent/run.d.ts.map +1 -1
- package/dist/agent/run.js +5 -1
- package/dist/agent/run.js.map +1 -1
- package/dist/agent-db.js +69 -10
- package/dist/aws-task-roles.d.ts +4 -2
- package/dist/aws-task-roles.d.ts.map +1 -1
- package/dist/aws-task-roles.js +4 -1
- package/dist/aws-task-roles.js.map +1 -1
- package/dist/caddy.d.ts +21 -4
- package/dist/caddy.d.ts.map +1 -1
- package/dist/caddy.js +27 -3
- package/dist/caddy.js.map +1 -1
- package/dist/cli-routing.js +1 -1
- package/dist/cli-routing.js.map +1 -1
- package/dist/cli.js +68 -7
- package/dist/cli.js.map +1 -1
- package/dist/cloudsql-tls.d.ts +93 -0
- package/dist/cloudsql-tls.d.ts.map +1 -0
- package/dist/cloudsql-tls.js +295 -0
- package/dist/cloudsql-tls.js.map +1 -0
- package/dist/compose.d.ts +43 -6
- package/dist/compose.d.ts.map +1 -1
- package/dist/compose.js +148 -23
- package/dist/compose.js.map +1 -1
- package/dist/converge-checkpoint.d.ts +1 -0
- package/dist/converge-checkpoint.d.ts.map +1 -1
- package/dist/converge-checkpoint.js +8 -1
- package/dist/converge-checkpoint.js.map +1 -1
- package/dist/converge-db-trust.d.ts +44 -0
- package/dist/converge-db-trust.d.ts.map +1 -0
- package/dist/converge-db-trust.js +158 -0
- package/dist/converge-db-trust.js.map +1 -0
- package/dist/converge-job-gcp.d.ts +5 -2
- package/dist/converge-job-gcp.d.ts.map +1 -1
- package/dist/converge-job-gcp.js +11 -13
- package/dist/converge-job-gcp.js.map +1 -1
- package/dist/converge-job-preflight.d.ts.map +1 -1
- package/dist/converge-job-preflight.js +8 -0
- package/dist/converge-job-preflight.js.map +1 -1
- package/dist/converge-job.d.ts +17 -0
- package/dist/converge-job.d.ts.map +1 -1
- package/dist/converge-job.js +12 -0
- package/dist/converge-job.js.map +1 -1
- package/dist/deployed-release.d.ts +4 -1
- package/dist/deployed-release.d.ts.map +1 -1
- package/dist/deployed-release.js +18 -8
- package/dist/deployed-release.js.map +1 -1
- package/dist/gcp-names.d.ts +34 -0
- package/dist/gcp-names.d.ts.map +1 -1
- package/dist/gcp-names.js +45 -0
- package/dist/gcp-names.js.map +1 -1
- package/dist/gcp-url-map.d.ts.map +1 -1
- package/dist/gcp-url-map.js +6 -2
- package/dist/gcp-url-map.js.map +1 -1
- package/dist/index.d.ts +3 -2
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +2 -1
- package/dist/index.js.map +1 -1
- package/dist/infra-contract.d.ts +1 -1
- package/dist/infra-contract.d.ts.map +1 -1
- package/dist/infra-contract.js +45 -1
- package/dist/infra-contract.js.map +1 -1
- package/dist/install-job.d.ts +4 -2
- package/dist/install-job.d.ts.map +1 -1
- package/dist/install-job.js +4 -1
- package/dist/install-job.js.map +1 -1
- package/dist/install-state.d.ts +13 -0
- package/dist/install-state.d.ts.map +1 -1
- package/dist/install-state.js +17 -4
- package/dist/install-state.js.map +1 -1
- package/dist/lifecycle.d.ts.map +1 -1
- package/dist/lifecycle.js +20 -8
- package/dist/lifecycle.js.map +1 -1
- package/dist/mcp-auth-proxy-setup.d.ts +48 -0
- package/dist/mcp-auth-proxy-setup.d.ts.map +1 -0
- package/dist/mcp-auth-proxy-setup.js +280 -0
- package/dist/mcp-auth-proxy-setup.js.map +1 -0
- package/dist/migration-runner.d.ts.map +1 -1
- package/dist/migration-runner.js +8 -3
- package/dist/migration-runner.js.map +1 -1
- package/dist/migration-targets.d.ts +11 -0
- package/dist/migration-targets.d.ts.map +1 -0
- package/dist/migration-targets.js +12 -0
- package/dist/migration-targets.js.map +1 -0
- package/dist/operator-access.d.ts +10 -0
- package/dist/operator-access.d.ts.map +1 -1
- package/dist/operator-access.js +5 -0
- package/dist/operator-access.js.map +1 -1
- package/dist/pool-budget-stack.d.ts +13 -1
- package/dist/pool-budget-stack.d.ts.map +1 -1
- package/dist/pool-budget-stack.js +11 -1
- package/dist/pool-budget-stack.js.map +1 -1
- package/dist/public-role-isolation.d.ts +7 -3
- package/dist/public-role-isolation.d.ts.map +1 -1
- package/dist/public-role-isolation.js +25 -13
- package/dist/public-role-isolation.js.map +1 -1
- package/dist/release-contract.d.ts.map +1 -1
- package/dist/release-contract.js +3 -0
- package/dist/release-contract.js.map +1 -1
- package/dist/release-manifest.d.ts +25 -1
- package/dist/release-manifest.d.ts.map +1 -1
- package/dist/release-manifest.js +36 -3
- package/dist/release-manifest.js.map +1 -1
- package/dist/remote-mcp.d.ts +55 -18
- package/dist/remote-mcp.d.ts.map +1 -1
- package/dist/remote-mcp.js +307 -77
- package/dist/remote-mcp.js.map +1 -1
- package/dist/runtime-secrets.d.ts +11 -0
- package/dist/runtime-secrets.d.ts.map +1 -1
- package/dist/runtime-secrets.js +40 -25
- package/dist/runtime-secrets.js.map +1 -1
- package/dist/scheduler-setup.d.ts +75 -0
- package/dist/scheduler-setup.d.ts.map +1 -0
- package/dist/scheduler-setup.js +331 -0
- package/dist/scheduler-setup.js.map +1 -0
- package/dist/seal-key-rotation.d.ts +7 -7
- package/dist/seal-key-rotation.d.ts.map +1 -1
- package/dist/seal-key-rotation.js +22 -22
- package/dist/seal-key-rotation.js.map +1 -1
- package/dist/self-hosted-db-tls.d.ts +37 -0
- package/dist/self-hosted-db-tls.d.ts.map +1 -0
- package/dist/self-hosted-db-tls.js +220 -0
- package/dist/self-hosted-db-tls.js.map +1 -0
- package/dist/self-hosted-release.d.ts +3 -1
- package/dist/self-hosted-release.d.ts.map +1 -1
- package/dist/self-hosted-release.js +33 -9
- package/dist/self-hosted-release.js.map +1 -1
- package/dist/self-hosted-roles.d.ts +43 -2
- package/dist/self-hosted-roles.d.ts.map +1 -1
- package/dist/self-hosted-roles.js +87 -1
- package/dist/self-hosted-roles.js.map +1 -1
- package/dist/self-hosted-scheduler-interval.d.ts +21 -0
- package/dist/self-hosted-scheduler-interval.d.ts.map +1 -0
- package/dist/self-hosted-scheduler-interval.js +68 -0
- package/dist/self-hosted-scheduler-interval.js.map +1 -0
- package/dist/self-hosted-start.d.ts +0 -21
- package/dist/self-hosted-start.d.ts.map +1 -1
- package/dist/self-hosted-start.js +39 -1
- package/dist/self-hosted-start.js.map +1 -1
- package/dist/self-hosted-upgrade.d.ts +19 -7
- package/dist/self-hosted-upgrade.d.ts.map +1 -1
- package/dist/self-hosted-upgrade.js +78 -25
- package/dist/self-hosted-upgrade.js.map +1 -1
- package/dist/stack-contract.d.ts +234 -28
- package/dist/stack-contract.d.ts.map +1 -1
- package/dist/stack-contract.js +397 -39
- package/dist/stack-contract.js.map +1 -1
- package/dist/stack-converge.d.ts +31 -0
- package/dist/stack-converge.d.ts.map +1 -1
- package/dist/stack-converge.js +71 -30
- package/dist/stack-converge.js.map +1 -1
- package/dist/staging-database.d.ts +22 -0
- package/dist/staging-database.d.ts.map +1 -0
- package/dist/staging-database.js +117 -0
- package/dist/staging-database.js.map +1 -0
- package/dist/upgrade/app-roll.d.ts +25 -4
- package/dist/upgrade/app-roll.d.ts.map +1 -1
- package/dist/upgrade/app-roll.js +63 -17
- package/dist/upgrade/app-roll.js.map +1 -1
- package/dist/upgrade/converge.d.ts +5 -0
- package/dist/upgrade/converge.d.ts.map +1 -1
- package/dist/upgrade/converge.js +207 -20
- package/dist/upgrade/converge.js.map +1 -1
- package/dist/upgrade/health.d.ts +31 -7
- package/dist/upgrade/health.d.ts.map +1 -1
- package/dist/upgrade/health.js +41 -17
- package/dist/upgrade/health.js.map +1 -1
- package/dist/upgrade/image-forms.d.ts +1 -1
- package/dist/upgrade/image-forms.d.ts.map +1 -1
- package/dist/upgrade/image-forms.js +24 -7
- package/dist/upgrade/image-forms.js.map +1 -1
- package/dist/upgrade/release-images.d.ts +12 -3
- package/dist/upgrade/release-images.d.ts.map +1 -1
- package/dist/upgrade/release-images.js +13 -4
- package/dist/upgrade/release-images.js.map +1 -1
- package/dist/upgrade/upgrade.d.ts +19 -3
- package/dist/upgrade/upgrade.d.ts.map +1 -1
- package/dist/upgrade/upgrade.js +37 -2
- package/dist/upgrade/upgrade.js.map +1 -1
- package/dist/upgrader-gcp.d.ts +13 -0
- package/dist/upgrader-gcp.d.ts.map +1 -1
- package/dist/upgrader-gcp.js +50 -1
- package/dist/upgrader-gcp.js.map +1 -1
- package/dist/upgrader-iam-preflight.d.ts.map +1 -1
- package/dist/upgrader-iam-preflight.js +6 -1
- package/dist/upgrader-iam-preflight.js.map +1 -1
- package/dist/upgrader-job.d.ts +1 -1
- package/dist/upgrader-job.d.ts.map +1 -1
- package/dist/upgrader-job.js +20 -14
- package/dist/upgrader-job.js.map +1 -1
- package/dist/upgrader-records.d.ts +1 -1
- package/dist/upgrader-records.d.ts.map +1 -1
- package/dist/upgrader-records.js +26 -7
- package/dist/upgrader-records.js.map +1 -1
- package/dist/upgrader-setup.d.ts.map +1 -1
- package/dist/upgrader-setup.js +10 -5
- package/dist/upgrader-setup.js.map +1 -1
- package/dist/wizard.d.ts +7 -0
- package/dist/wizard.d.ts.map +1 -1
- package/dist/wizard.js +11 -0
- package/dist/wizard.js.map +1 -1
- package/dist/wizards/gcp-cost.d.ts +31 -0
- package/dist/wizards/gcp-cost.d.ts.map +1 -1
- package/dist/wizards/gcp-cost.js +103 -18
- package/dist/wizards/gcp-cost.js.map +1 -1
- package/dist/wizards/gcp.d.ts.map +1 -1
- package/dist/wizards/gcp.js +129 -27
- package/dist/wizards/gcp.js.map +1 -1
- package/package.json +2 -2
- package/src/adapter.ts +6 -0
- package/src/admin-domain.test.ts +9 -8
- package/src/admin-domain.ts +13 -3
- package/src/admin-memory.test.ts +2 -1
- package/src/adopt-existing.test.ts +85 -0
- package/src/adopt-existing.ts +141 -3
- package/src/agent/command.test.ts +49 -1
- package/src/agent/command.ts +39 -9
- package/src/agent/run.test.ts +19 -0
- package/src/agent/run.ts +11 -2
- package/src/aws-task-roles.ts +5 -2
- package/src/caddy-redirects.docker.test.ts +2 -0
- package/src/caddy-redirects.test.ts +4 -1
- package/src/caddy-validate.test.ts +7 -1
- package/src/caddy.test.ts +39 -1
- package/src/caddy.ts +36 -4
- package/src/checkpoint-secrets.test.ts +14 -6
- package/src/cli-routing.test.ts +1 -1
- package/src/cli-routing.ts +1 -1
- package/src/cli.ts +71 -5
- package/src/cloudsql-tls.test.ts +255 -0
- package/src/cloudsql-tls.ts +359 -0
- package/src/compose.ts +193 -24
- package/src/converge-checkpoint.ts +8 -1
- package/src/converge-db-trust.test.ts +237 -0
- package/src/converge-db-trust.ts +212 -0
- package/src/converge-job-gcp.ts +11 -12
- package/src/converge-job-preflight.test.ts +5 -0
- package/src/converge-job-preflight.ts +8 -0
- package/src/converge-job.test.ts +70 -0
- package/src/converge-job.ts +32 -0
- package/src/database-tls-builders.test.ts +56 -0
- package/src/deployed-release.test.ts +107 -40
- package/src/deployed-release.ts +30 -9
- package/src/gateway-env-isolation.test.ts +50 -12
- package/src/gcp-names.ts +56 -0
- package/src/gcp-url-map.test.ts +6 -8
- package/src/gcp-url-map.ts +6 -2
- package/src/index.test.ts +10 -4
- package/src/index.ts +7 -0
- package/src/infra-contract.test.ts +7 -3
- package/src/infra-contract.ts +45 -1
- package/src/install-job.ts +4 -1
- package/src/install-state.ts +33 -4
- package/src/lifecycle.ts +23 -11
- package/src/mcp-auth-proxy-setup.test.ts +305 -0
- package/src/mcp-auth-proxy-setup.ts +374 -0
- package/src/mcp-iap-stacks.test.ts +1 -1
- package/src/media-volume.test.ts +1 -1
- package/src/migration-runner.ts +14 -9
- package/src/migration-targets.ts +12 -0
- package/src/operator-access-stacks.test.ts +1 -1
- package/src/operator-access.test.ts +20 -4
- package/src/operator-access.ts +14 -0
- package/src/pool-budget-stack.ts +15 -0
- package/src/pool-budget-stacks.test.ts +39 -14
- package/src/public-role-isolation.test.ts +18 -8
- package/src/public-role-isolation.ts +31 -17
- package/src/release-contract.ts +3 -0
- package/src/release-manifest.test.ts +25 -0
- package/src/release-manifest.ts +59 -4
- package/src/remote-mcp-stack-config.test.ts +19 -9
- package/src/remote-mcp.test.ts +252 -57
- package/src/remote-mcp.ts +336 -77
- package/src/runtime-secrets.test.ts +37 -14
- package/src/runtime-secrets.ts +87 -27
- package/src/scheduler-setup.test.ts +201 -0
- package/src/scheduler-setup.ts +375 -0
- package/src/seal-key-rotation.test.ts +2 -2
- package/src/seal-key-rotation.ts +25 -25
- package/src/self-hosted-backup.test.ts +1 -0
- package/src/self-hosted-compose.test.ts +180 -6
- package/src/self-hosted-db-tls.test.ts +111 -0
- package/src/self-hosted-db-tls.ts +287 -0
- package/src/self-hosted-release-resolve.test.ts +71 -0
- package/src/self-hosted-release.ts +41 -11
- package/src/self-hosted-roles.integration.test.ts +2 -0
- package/src/self-hosted-roles.test.ts +87 -3
- package/src/self-hosted-roles.ts +101 -3
- package/src/self-hosted-scheduler-interval.test.ts +66 -0
- package/src/self-hosted-scheduler-interval.ts +79 -0
- package/src/self-hosted-start.test.ts +35 -2
- package/src/self-hosted-start.ts +20 -2
- package/src/self-hosted-upgrade.test.ts +104 -14
- package/src/self-hosted-upgrade.ts +123 -31
- package/src/stack-contract-parity.test.ts +79 -12
- package/src/stack-contract.test.ts +199 -31
- package/src/stack-contract.ts +472 -45
- package/src/stack-converge-secrets.test.ts +28 -13
- package/src/stack-converge.test.ts +203 -28
- package/src/stack-converge.ts +92 -30
- package/src/staging-database.test.ts +114 -0
- package/src/staging-database.ts +148 -0
- package/src/state-store.test.ts +2 -1
- package/src/upgrade/app-roll.ts +97 -19
- package/src/upgrade/converge.ts +249 -19
- package/src/upgrade/health.test.ts +63 -25
- package/src/upgrade/health.ts +54 -22
- package/src/upgrade/image-forms.test.ts +34 -0
- package/src/upgrade/image-forms.ts +23 -8
- package/src/upgrade/release-images.test.ts +5 -1
- package/src/upgrade/release-images.ts +22 -6
- package/src/upgrade/upgrade.test.ts +438 -46
- package/src/upgrade/upgrade.ts +64 -6
- package/src/upgrader-gcp.ts +66 -3
- package/src/upgrader-iam-preflight.test.ts +19 -0
- package/src/upgrader-iam-preflight.ts +6 -0
- package/src/upgrader-job.test.ts +101 -27
- package/src/upgrader-job.ts +27 -14
- package/src/upgrader-records.test.ts +97 -12
- package/src/upgrader-records.ts +28 -11
- package/src/upgrader-setup.test.ts +2 -0
- package/src/upgrader-setup.ts +10 -4
- package/src/wizard.ts +19 -0
- package/src/wizards/gcp-cost.test.ts +103 -0
- package/src/wizards/gcp-cost.ts +125 -18
- package/src/wizards/gcp.ts +164 -22
- package/stacks/aws/Pulumi.yaml +1 -1
- package/stacks/aws/index.ts +72 -14
- package/stacks/azure/index.ts +108 -21
- package/stacks/gcp/Pulumi.yaml +1 -1
- package/stacks/gcp/README.md +1 -0
- package/stacks/gcp/index.ts +133 -24
- package/stacks/gcp-firebase/Pulumi.yaml +1 -1
- package/stacks/gcp-firebase/index.ts +212 -34
- package/stacks/self-hosted/Pulumi.yaml +3 -0
- package/stacks/self-hosted/README.md +6 -1
- package/stacks/self-hosted/index.ts +40 -5
package/dist/stack-contract.d.ts
CHANGED
|
@@ -1,6 +1,45 @@
|
|
|
1
1
|
import type { SupportedProvider } from "./adapter.js";
|
|
2
2
|
export type GcpProvider = "gcp" | "gcp-firebase";
|
|
3
|
-
|
|
3
|
+
/**
|
|
4
|
+
* The install's Cloud Run services, by role: the admin, the visitor data
|
|
5
|
+
* gateway and (#1328) the MCP-Auth-Proxy — remote MCP's sign-in broker and
|
|
6
|
+
* its forwarder to the IAP-protected admin, a service of its own so a hole
|
|
7
|
+
* in a visitor handler can never reach the operators' Google tokens.
|
|
8
|
+
* Which deployed service plays which role is {@link cloudRunServicePrefix}.
|
|
9
|
+
*/
|
|
10
|
+
export type CloudRunSlug = "admin" | "gateway" | "mcp-auth-proxy";
|
|
11
|
+
/** Every {@link CloudRunSlug}, in roll order: the admin first, the proxy last. */
|
|
12
|
+
export declare const CLOUD_RUN_SLUGS: readonly CloudRunSlug[];
|
|
13
|
+
/**
|
|
14
|
+
* The name prefix of the Cloud Run service that plays `slug` on an install
|
|
15
|
+
* (Pulumi suffixes the names it generates; the services named explicitly,
|
|
16
|
+
* {@link fixedCloudRunServiceName}, match their prefix exactly).
|
|
17
|
+
*
|
|
18
|
+
* One asymmetry, decided as E13 (a) of the gateway hardening plan (#763):
|
|
19
|
+
* on `gcp-firebase` the MCP-Auth-Proxy is the service that was the gateway
|
|
20
|
+
* before #1328. Its `run.app` URL is the remote-MCP address every connector
|
|
21
|
+
* in claude.ai / ChatGPT holds, and the Google sign-in client's registered
|
|
22
|
+
* redirect URI points at it; neither can move without the Owner
|
|
23
|
+
* re-connecting every client and editing the OAuth client by hand. So that
|
|
24
|
+
* service keeps its name and becomes the proxy, and the visitor gateway is
|
|
25
|
+
* the new `caelo-<env>-data-gateway` (the Firebase `/api/**` rewrite the
|
|
26
|
+
* publisher writes follows the admin's `CAELO_GATEWAY_SERVICE`). On `gcp`
|
|
27
|
+
* the MCP address is the site's own host behind the load balancer, so no
|
|
28
|
+
* service name is pinned there and the proxy is the new service.
|
|
29
|
+
*
|
|
30
|
+
* No prefix is a prefix of another (`…-gateway` does not prefix
|
|
31
|
+
* `…-data-gateway`), so a `metadata.name~^<prefix>` lookup finds one role.
|
|
32
|
+
*/
|
|
33
|
+
export declare function cloudRunServicePrefix(provider: GcpProvider, env: string, slug: CloudRunSlug): string;
|
|
34
|
+
/**
|
|
35
|
+
* The exact name of a service that is created under a fixed name (#1328):
|
|
36
|
+
* the `gcp-firebase` data gateway and the `gcp` MCP-Auth-Proxy. Fixed, not
|
|
37
|
+
* Pulumi-suffixed, because the converge creates them on existing installs
|
|
38
|
+
* with gcloud, and the stack's next `pulumi up` must then find the same
|
|
39
|
+
* service instead of creating a second one. Null for the services Pulumi
|
|
40
|
+
* has always auto-named.
|
|
41
|
+
*/
|
|
42
|
+
export declare function fixedCloudRunServiceName(provider: GcpProvider, env: string, slug: CloudRunSlug): string | null;
|
|
4
43
|
/**
|
|
5
44
|
* One container env var, in the shape Pulumi's `gcp.cloudrunv2.Service`
|
|
6
45
|
* `envs` accepts. `V` is the value type: `pulumi.Input<string>` in the
|
|
@@ -46,13 +85,69 @@ export interface DatabaseUrls<V = string> {
|
|
|
46
85
|
* state the admin publishes into cms_public.
|
|
47
86
|
*/
|
|
48
87
|
readonly public: V;
|
|
88
|
+
/**
|
|
89
|
+
* #1329 — admin_role on cms_public_staging: the admin's third pool, for
|
|
90
|
+
* the staging database's plugin schemas and its half of the projection.
|
|
91
|
+
*/
|
|
92
|
+
readonly publicStagingAdmin: V;
|
|
93
|
+
/**
|
|
94
|
+
* #1329 — public_staging_role on cms_public_staging, the staging
|
|
95
|
+
* gateway's only pool (served from P3b-2 on). It reaches no live data.
|
|
96
|
+
*/
|
|
97
|
+
readonly publicStaging: V;
|
|
49
98
|
}
|
|
50
99
|
/**
|
|
51
100
|
* Password-less connection URLs for a Cloud SQL instance at `host`. The
|
|
52
101
|
* password reaches the apps separately, as a Secret Manager reference
|
|
53
102
|
* ({@link SERVICE_SECRET_ENV}).
|
|
103
|
+
*
|
|
104
|
+
* TLS is `verify-full` against Google's Cloud SQL shared-CA bundle, which
|
|
105
|
+
* every image carries (#1338, shared database-tls.ts). The shared CA's
|
|
106
|
+
* server certificate names the instance's DNS name and no IP, so `host`
|
|
107
|
+
* must be that name (cloudsql-tls.ts resolves it in the VPC); an IP is
|
|
108
|
+
* refused here rather than producing URLs no connection can verify.
|
|
109
|
+
*
|
|
110
|
+
* @throws Error when `host` is an IP literal
|
|
54
111
|
*/
|
|
55
112
|
export declare function databaseUrls(host: string): DatabaseUrls;
|
|
113
|
+
/**
|
|
114
|
+
* #1338 — the Cloud SQL server CA mode every install runs: Google's shared
|
|
115
|
+
* CA. Its server certificate carries the instance's DNS name, so a client
|
|
116
|
+
* can verify the host (`sslmode=verify-full`). The default per-instance CA
|
|
117
|
+
* names no host a private-IP client can dial ("The SAN field contains the
|
|
118
|
+
* hostname (DNS name of the instance) only for instances enabled with
|
|
119
|
+
* Private Service Connect" — docs.cloud.google.com/sql/docs/postgres/authorize-ssl).
|
|
120
|
+
* An instance moves from per-instance to shared, never back.
|
|
121
|
+
*/
|
|
122
|
+
export declare const CLOUD_SQL_SERVER_CA_MODE = "GOOGLE_MANAGED_CAS_CA";
|
|
123
|
+
/** #1338 — Cloud SQL refuses unencrypted connections: every client uses verify-full. */
|
|
124
|
+
export declare const CLOUD_SQL_SSL_MODE = "ENCRYPTED_ONLY";
|
|
125
|
+
/** The `dnsNames[].connectionType` of the name a private-services-access client dials. */
|
|
126
|
+
export declare const CLOUD_SQL_PSA_CONNECTION_TYPE = "PRIVATE_SERVICES_ACCESS";
|
|
127
|
+
/**
|
|
128
|
+
* The private Cloud DNS zone that resolves the instance's DNS name to its
|
|
129
|
+
* private IP inside the install's VPC. Cloud SQL assigns the name but does
|
|
130
|
+
* not resolve it: "create the DNS record in a private DNS zone in the
|
|
131
|
+
* corresponding Virtual Private Cloud (VPC) network"
|
|
132
|
+
* (docs.cloud.google.com/sql/docs/postgres/configure-ssl-instance). The zone
|
|
133
|
+
* is the name itself, holding its one A record.
|
|
134
|
+
*/
|
|
135
|
+
export declare function cloudSqlDnsZoneName(env: string): string;
|
|
136
|
+
/**
|
|
137
|
+
* The DNS name a private-IP client dials, from an instance's `dnsNames`,
|
|
138
|
+
* lower-case and without the trailing dot. Null when the instance has none
|
|
139
|
+
* (a per-instance-CA instance before its move to the shared CA).
|
|
140
|
+
*/
|
|
141
|
+
export declare function cloudSqlPrivateDnsName(dnsNames: readonly {
|
|
142
|
+
readonly name?: string;
|
|
143
|
+
readonly connectionType?: string;
|
|
144
|
+
}[] | undefined): string | null;
|
|
145
|
+
/** The database URL vars each service carries (the env contract below sets them). */
|
|
146
|
+
export declare const DATABASE_URL_VARS: {
|
|
147
|
+
readonly admin: readonly ["ADMIN_DATABASE_URL", "PUBLIC_ADMIN_DATABASE_URL", "PUBLIC_STAGING_ADMIN_DATABASE_URL"];
|
|
148
|
+
readonly gateway: readonly ["PUBLIC_DATABASE_URL"];
|
|
149
|
+
readonly "mcp-auth-proxy": readonly [];
|
|
150
|
+
};
|
|
56
151
|
/** What a running service's env derives from: install metadata + the database. */
|
|
57
152
|
export interface RuntimeEnvInputs<V = string> extends ServiceEnvInputs {
|
|
58
153
|
/** From the Cloud SQL private IP — an Output in the stacks. */
|
|
@@ -120,6 +215,38 @@ export declare const AUDIT_RESULTS_BUCKET_ENV_VAR = "CAELO_AUDIT_RESULTS_BUCKET"
|
|
|
120
215
|
export declare const CAPTURE_JOB_ENV_VAR = "CAELO_CAPTURE_JOB";
|
|
121
216
|
export declare const CAPTURE_BUCKET_ENV_VAR = "CAELO_CAPTURE_BUCKET";
|
|
122
217
|
export declare const MEDIA_BUCKET_ENV_VAR = "CAELO_MEDIA_BUCKET";
|
|
218
|
+
/**
|
|
219
|
+
* #1140 — the admin env var naming the service account of the scheduler
|
|
220
|
+
* tick (scheduler-setup.ts): the one IAP identity the admin's
|
|
221
|
+
* `/api/internal/scheduler/tick` accepts. `upgrade` leaves it untouched when
|
|
222
|
+
* it could not set the tick up.
|
|
223
|
+
*/
|
|
224
|
+
export declare const SCHEDULER_SERVICE_ACCOUNT_ENV_VAR = "CAELO_SCHEDULER_SERVICE_ACCOUNT";
|
|
225
|
+
/**
|
|
226
|
+
* #1140 — how often the one scheduler job calls the admin's tick, in
|
|
227
|
+
* minutes (the `schedulerIntervalMinutes` install knob). Each task's own
|
|
228
|
+
* cadence lives in the admin's due-table; this only bounds how soon a due
|
|
229
|
+
* task runs. 1 is Cloud Scheduler's floor; above 15 Cloud Run has stopped
|
|
230
|
+
* the idle admin, so every tick would pay a cold start without saving
|
|
231
|
+
* anything (maintainer decision on #1140, 2026-10-26).
|
|
232
|
+
*/
|
|
233
|
+
export declare const SCHEDULER_INTERVAL_MINUTES: {
|
|
234
|
+
readonly default: 5;
|
|
235
|
+
readonly min: 1;
|
|
236
|
+
readonly max: 15;
|
|
237
|
+
};
|
|
238
|
+
/**
|
|
239
|
+
* Parse the `schedulerIntervalMinutes` knob. Undefined (not configured) is
|
|
240
|
+
* the default; anything else must be an integer in the bounds — an
|
|
241
|
+
* out-of-range or non-numeric value throws (CLAUDE.md §2: no silent
|
|
242
|
+
* substitute).
|
|
243
|
+
*
|
|
244
|
+
* @param raw - the configured value (CLI flag, Pulumi config, install.json).
|
|
245
|
+
* @param source - names where the value came from, for the error.
|
|
246
|
+
*/
|
|
247
|
+
export declare function parseSchedulerIntervalMinutes(raw: string | number | undefined, source?: string): number;
|
|
248
|
+
/** The Cloud Scheduler / cron expression of a tick every `minutes` minutes (UTC). */
|
|
249
|
+
export declare function schedulerCron(minutes: number): string;
|
|
123
250
|
/**
|
|
124
251
|
* Where the admin keeps media: the image's default media root
|
|
125
252
|
* (`/app/apps/admin` + `data/media`), now the mount point of the media
|
|
@@ -171,7 +298,9 @@ export declare function adminMediaVolumeTemplate(volume: MediaVolumeContract): {
|
|
|
171
298
|
* The Secret Manager secrets admin + gateway read at runtime, by logical
|
|
172
299
|
* name ({@link gcpSecretId} gives the secret id).
|
|
173
300
|
*/
|
|
174
|
-
export type RuntimeSecret = "postgres-password" | "public-role-password"
|
|
301
|
+
export type RuntimeSecret = "postgres-password" | "public-role-password"
|
|
302
|
+
/** #1329 — public_staging_role's password, the staging gateway's login. */
|
|
303
|
+
| "public-staging-role-password" | "secret-kek" | "internal-secret" | "tool-approval-secret" | "staging-gate-secret"
|
|
175
304
|
/**
|
|
176
305
|
* #914 — the install's Google sign-in client: JSON
|
|
177
306
|
* `{"client_id","client_secret"}`, `{}` while it is not set up. One client
|
|
@@ -188,7 +317,7 @@ export type RuntimeSecret = "postgres-password" | "public-role-password" | "secr
|
|
|
188
317
|
*/
|
|
189
318
|
| "mcp-oauth-seal-key";
|
|
190
319
|
/** The Postgres roles Caelo's services log in as, with their passwords. */
|
|
191
|
-
export type DatabaseRole = "admin_role" | "public_role";
|
|
320
|
+
export type DatabaseRole = "admin_role" | "public_role" | "public_staging_role";
|
|
192
321
|
/**
|
|
193
322
|
* Each database role's password secret — one per role (#613), so the
|
|
194
323
|
* gateway's SA, which reads only the public_role password, can never read
|
|
@@ -204,7 +333,14 @@ export declare const DATABASE_ROLE_SECRET: Readonly<Record<DatabaseRole, Runtime
|
|
|
204
333
|
* Pulumi only references them, so a `pulumi up` after an upgrade never
|
|
205
334
|
* collides with a secret upgrade created.
|
|
206
335
|
*/
|
|
207
|
-
export declare const CLI_GENERATED_SECRETS: readonly ["internal-secret", "tool-approval-secret", "public-role-password", "staging-gate-secret", "operator-oauth-client", "mcp-oauth-seal-key"];
|
|
336
|
+
export declare const CLI_GENERATED_SECRETS: readonly ["internal-secret", "tool-approval-secret", "public-role-password", "public-staging-role-password", "staging-gate-secret", "operator-oauth-client", "mcp-oauth-seal-key"];
|
|
337
|
+
/**
|
|
338
|
+
* CLI-generated secrets no running service reads yet, each with what reads
|
|
339
|
+
* it until then. Everything else in {@link CLI_GENERATED_SECRETS} must be
|
|
340
|
+
* read by a service (stack-contract.test.ts), so an orphaned secret cannot
|
|
341
|
+
* ship by accident.
|
|
342
|
+
*/
|
|
343
|
+
export declare const SECRETS_SET_UP_AHEAD_OF_THEIR_READER: Readonly<Partial<Record<(typeof CLI_GENERATED_SECRETS)[number], string>>>;
|
|
208
344
|
/** A CLI-generated secret's first value: random hex, random base64, or a fixed placeholder. */
|
|
209
345
|
export type GeneratedSecretFormat = {
|
|
210
346
|
readonly kind: "hex32";
|
|
@@ -247,9 +383,9 @@ export declare const OPERATOR_OAUTH_CLIENT_FILE_ENV = "CAELO_OPERATOR_OAUTH_CLIE
|
|
|
247
383
|
* time the file is read ("When reading a volume, Cloud Run always fetches
|
|
248
384
|
* the secret value from the Secret Manager to use the value with the latest
|
|
249
385
|
* version" — cloud.google.com/run/docs/configuring/services/secrets). So the
|
|
250
|
-
* client the Owner saves under Settings → Google sign-in reaches the running
|
|
251
|
-
* (which re-reads it within 60 s) without a new revision, and
|
|
252
|
-
* needs no right to deploy the
|
|
386
|
+
* client the Owner saves under Settings → Google sign-in reaches the running
|
|
387
|
+
* MCP-Auth-Proxy (which re-reads it within 60 s) without a new revision, and
|
|
388
|
+
* the admin needs no right to deploy the proxy.
|
|
253
389
|
*/
|
|
254
390
|
export interface SecretFileContract {
|
|
255
391
|
readonly secret: RuntimeSecret;
|
|
@@ -261,11 +397,11 @@ export interface SecretFileContract {
|
|
|
261
397
|
/** Always `latest`: a pinned version would never see the Owner's new client. */
|
|
262
398
|
readonly version: "latest";
|
|
263
399
|
}
|
|
264
|
-
/** The
|
|
400
|
+
/** The Google sign-in client file the remote-MCP broker reads (#806, #914; in the MCP-Auth-Proxy since #1328). */
|
|
265
401
|
export declare const OPERATOR_OAUTH_CLIENT_FILE: SecretFileContract;
|
|
266
402
|
/** Full path of a secret file inside the container. */
|
|
267
403
|
export declare function secretFilePath(file: SecretFileContract): string;
|
|
268
|
-
/** Each service's secret files.
|
|
404
|
+
/** Each service's secret files. Only the MCP-Auth-Proxy has one. */
|
|
269
405
|
export declare const SERVICE_SECRET_FILES: Readonly<Record<CloudRunSlug, readonly SecretFileContract[]>>;
|
|
270
406
|
/** A secret file an older contract mounted; upgrade unmounts it in the roll. */
|
|
271
407
|
export interface RetiredSecretFile {
|
|
@@ -322,6 +458,14 @@ export declare const RETIRED_SERVICE_ENV: Readonly<Record<CloudRunSlug, readonly
|
|
|
322
458
|
* in front of it append, counting the client's own.
|
|
323
459
|
*/
|
|
324
460
|
export declare const TRUSTED_PROXY_HOPS_ENV = "CAELO_TRUSTED_PROXY_HOPS";
|
|
461
|
+
/**
|
|
462
|
+
* #1329 — the env var naming which environment a gateway serves, `live` or
|
|
463
|
+
* `staging` (apps/api-gateway database-env.ts): its database and login
|
|
464
|
+
* follow from it, and it refuses anything of the other environment's. The
|
|
465
|
+
* gateway refuses to boot without it. Every adapter sets `live` on the
|
|
466
|
+
* gateway it runs today; the staging gateway (P3b-2) gets `staging`.
|
|
467
|
+
*/
|
|
468
|
+
export declare const GATEWAY_ENVIRONMENT_ENV = "CAELO_GATEWAY_ENVIRONMENT";
|
|
325
469
|
/**
|
|
326
470
|
* {@link TRUSTED_PROXY_HOPS_ENV} per provider — a property of each
|
|
327
471
|
* adapter's topology (CLAUDE.md §11.B), so it is declared here once and every
|
|
@@ -337,17 +481,64 @@ export declare const GATEWAY_TRUSTED_PROXY_HOPS: Readonly<Record<SupportedProvid
|
|
|
337
481
|
*/
|
|
338
482
|
export declare function gatewayEnvContract<V>(inputs: RuntimeEnvInputs<V>): CloudRunEnvVar<V | string>[];
|
|
339
483
|
/**
|
|
340
|
-
* #
|
|
341
|
-
*
|
|
342
|
-
*
|
|
343
|
-
*
|
|
344
|
-
*
|
|
345
|
-
*
|
|
346
|
-
|
|
347
|
-
|
|
484
|
+
* #1328 — whether remote MCP can exist on a provider, as the MCP-Auth-Proxy
|
|
485
|
+
* reads it. It needs the admin behind Google IAP, which only the Google
|
|
486
|
+
* Cloud installs have. `unavailable` makes the proxy answer one fixed 404
|
|
487
|
+
* to everything but its health check: the service exists on every provider
|
|
488
|
+
* at zero minimum instances (E14 a of #763), its attack surface one branch.
|
|
489
|
+
* The proxy refuses to start without the var — no default (CLAUDE.md §2).
|
|
490
|
+
*/
|
|
491
|
+
export declare const REMOTE_MCP_MODE_ENV = "CAELO_REMOTE_MCP";
|
|
492
|
+
/** {@link REMOTE_MCP_MODE_ENV} per provider. */
|
|
493
|
+
export declare const REMOTE_MCP_MODE: Readonly<Record<SupportedProvider, "available" | "unavailable">>;
|
|
494
|
+
/**
|
|
495
|
+
* {@link TRUSTED_PROXY_HOPS_ENV} of the MCP-Auth-Proxy per provider: its
|
|
496
|
+
* rate limits key on the client address by the same rule as the gateway's
|
|
497
|
+
* (@caelo-cms/shared client-address.ts), under its own topology.
|
|
498
|
+
*/
|
|
499
|
+
export declare const MCP_AUTH_PROXY_TRUSTED_PROXY_HOPS: Readonly<Record<SupportedProvider, number>>;
|
|
500
|
+
/**
|
|
501
|
+
* #1328 — points the `gcp-firebase` MCP-Auth-Proxy at the visitor data
|
|
502
|
+
* gateway for the traffic that still reaches the service that used to be
|
|
503
|
+
* the gateway: the Firebase `/api/**` rewrite of the release that is live
|
|
504
|
+
* until the next Publish live, and the staging host's Cloud Run domain
|
|
505
|
+
* mapping (#650), which only the domain's verified owner could move. The
|
|
506
|
+
* proxy streams that traffic to the data gateway unchanged instead of
|
|
507
|
+
* answering it (apps/mcp-auth-proxy interim-forward.ts). gcp-firebase only.
|
|
508
|
+
*/
|
|
509
|
+
export declare const INTERIM_FORWARD_ORIGIN_ENV = "CAELO_INTERIM_FORWARD_ORIGIN";
|
|
510
|
+
/**
|
|
511
|
+
* The env of the MCP-Auth-Proxy. No database URL, no pool size, no site
|
|
512
|
+
* settings: the broker reads env plus one secret file and nothing else
|
|
513
|
+
* (apps/mcp-auth-proxy, whose import lint keeps every database client out).
|
|
514
|
+
* The remote-MCP identity env — its public origin, the admin's URL — comes
|
|
515
|
+
* on top from {@link remoteMcpIdentityEnv}, the gcp-firebase forward origin
|
|
516
|
+
* from the stack or the converge ({@link INTERIM_FORWARD_ORIGIN_ENV}).
|
|
517
|
+
*/
|
|
518
|
+
export declare function mcpAuthProxyEnvContract(inputs: {
|
|
519
|
+
readonly provider: SupportedProvider;
|
|
520
|
+
readonly env: string;
|
|
521
|
+
}): CloudRunEnvVar[];
|
|
522
|
+
/**
|
|
523
|
+
* #806 — the MCP-Auth-Proxy's request timeout, in seconds: Cloud Run's
|
|
524
|
+
* maximum (the gateway's until #1328 moved the broker out). The proxy
|
|
525
|
+
* streams remote-MCP requests to the admin, and a `caelo_chat` turn streams
|
|
526
|
+
* for as long as the admin's own chat stream may (the admin runs at 3600 s
|
|
527
|
+
* for the same reason). A timeout is a ceiling, not a reservation: Cloud
|
|
528
|
+
* Run bills request time, not the allowed maximum. On `gcp` the load
|
|
529
|
+
* balancer in front adds no shorter limit — the backend-service timeout
|
|
530
|
+
* does not apply to serverless NEGs, which get a fixed 60 minutes
|
|
348
531
|
* (cloud.google.com/load-balancing/docs/negs/serverless-neg-concepts).
|
|
349
532
|
*/
|
|
350
|
-
export declare const
|
|
533
|
+
export declare const MCP_AUTH_PROXY_TIMEOUT_SECONDS = 3600;
|
|
534
|
+
/**
|
|
535
|
+
* #1328 — the MCP-Auth-Proxy's maximum instances. It holds no database
|
|
536
|
+
* pool, so the connection budget does not bound it; ten instances of
|
|
537
|
+
* streaming proxies carry far more agent sessions than an install has
|
|
538
|
+
* operators, and the ceiling caps what a flood of sign-in requests can cost.
|
|
539
|
+
* Always provisioned at minimum 0 (E14 a of #763).
|
|
540
|
+
*/
|
|
541
|
+
export declare const DEFAULT_MCP_AUTH_PROXY_MAX_INSTANCES = 10;
|
|
351
542
|
/**
|
|
352
543
|
* Whether each Cloud Run service gets CPU only while it handles a request
|
|
353
544
|
* (Cloud Run's request-based billing, `cpuIdle: true`) or for its whole
|
|
@@ -356,11 +547,20 @@ export declare const GATEWAY_TIMEOUT_SECONDS = 3600;
|
|
|
356
547
|
* `resources`, which is how both services ran with always-on CPU without
|
|
357
548
|
* anyone choosing it — billed for every idle minute an instance stayed up.
|
|
358
549
|
*
|
|
359
|
-
* The gateway only
|
|
360
|
-
*
|
|
361
|
-
*
|
|
550
|
+
* The gateway and the MCP-Auth-Proxy only do work inside requests. The
|
|
551
|
+
* admin's periodic work and plugin workers run on the scheduler tick
|
|
552
|
+
* (#1140), but the quality audit and the site-import crawl still run on
|
|
553
|
+
* in-process timers that need CPU between requests (#1359, #1360), and the
|
|
554
|
+
* plugin runtime heartbeat would read an idling instance as down.
|
|
362
555
|
*/
|
|
363
556
|
export declare const SERVICE_CPU_IDLE: Readonly<Record<CloudRunSlug, boolean>>;
|
|
557
|
+
/**
|
|
558
|
+
* Whether each service egresses into the install's VPC: the admin and the
|
|
559
|
+
* gateway reach Cloud SQL's private IP; the MCP-Auth-Proxy reaches nothing
|
|
560
|
+
* private (#1328) — it calls Google's token endpoint and the admin's public,
|
|
561
|
+
* IAP-gated URL, so it gets no route to the database's network at all.
|
|
562
|
+
*/
|
|
563
|
+
export declare const SERVICE_VPC_EGRESS: Readonly<Record<CloudRunSlug, boolean>>;
|
|
364
564
|
/** Admin env var naming the Secret Manager secret the Owner writes the Google sign-in client to. */
|
|
365
565
|
export declare const OPERATOR_OAUTH_CLIENT_STORE_ENV = "CAELO_OPERATOR_OAUTH_CLIENT_STORE";
|
|
366
566
|
/** `projects/<project>/secrets/<id>` of the Google sign-in client secret (#914). */
|
|
@@ -399,7 +599,7 @@ export declare function operatorOAuthClientSecretResource(projectId: string, env
|
|
|
399
599
|
* usually can.
|
|
400
600
|
*/
|
|
401
601
|
export interface RemoteMcpIdentity {
|
|
402
|
-
/** Where the
|
|
602
|
+
/** Where the MCP-Auth-Proxy forwards `/api/mcp/<surface>` to (IAP in front). */
|
|
403
603
|
readonly adminUrl: string;
|
|
404
604
|
/** The broker's public origin; no trailing slash. */
|
|
405
605
|
readonly mcpPublicUrl: string;
|
|
@@ -433,17 +633,19 @@ export type RemoteMcpIdentityInputs = {
|
|
|
433
633
|
readonly adminServiceName: string;
|
|
434
634
|
/** The services' `status.url` (`https://<name>-<hash>-<r>.a.run.app`). */
|
|
435
635
|
readonly adminServiceUrl: string;
|
|
436
|
-
|
|
636
|
+
/** The MCP-Auth-Proxy's: the service that was the gateway before #1328 (E13 a). */
|
|
637
|
+
readonly mcpAuthProxyServiceUrl: string;
|
|
437
638
|
};
|
|
438
639
|
/**
|
|
439
640
|
* The install's remote-MCP identity.
|
|
440
641
|
*
|
|
441
642
|
* - `gcp`: the broker answers on the site's own host through the load
|
|
442
|
-
* balancer (
|
|
443
|
-
* on `admin.<domain>` behind the LB's IAP; the IAP
|
|
444
|
-
* `/projects/<number>/global/backendServices/<id>`.
|
|
445
|
-
* - `gcp-firebase`: the broker answers on the
|
|
446
|
-
*
|
|
643
|
+
* balancer (its MCP path rules route to the MCP-Auth-Proxy's backend,
|
|
644
|
+
* #1328), the admin on `admin.<domain>` behind the LB's IAP; the IAP
|
|
645
|
+
* audience is `/projects/<number>/global/backendServices/<id>`.
|
|
646
|
+
* - `gcp-firebase`: the broker answers on the MCP-Auth-Proxy's own Cloud Run
|
|
647
|
+
* URL — the URL the gateway had before #1328 (E13 a) — never through
|
|
648
|
+
* Firebase Hosting (rewrites cut requests at 60 s and buffer streams), the
|
|
447
649
|
* admin on its Cloud Run URL behind native IAP — whatever custom domain
|
|
448
650
|
* is mapped to it, IAP and its audience are the service's; the audience
|
|
449
651
|
* is `/projects/<number>/locations/<region>/services/<name>`.
|
|
@@ -524,6 +726,8 @@ export type IamPrincipal =
|
|
|
524
726
|
"run-sa"
|
|
525
727
|
/** The runtime SA the gateway runs as. */
|
|
526
728
|
| "gateway-sa"
|
|
729
|
+
/** #1328 — the MCP-Auth-Proxy's SA: two secrets, nothing else. */
|
|
730
|
+
| "mcp-auth-proxy-sa"
|
|
527
731
|
/** The `gcp` stack's static-publisher SA. */
|
|
528
732
|
| "static-publisher-sa"
|
|
529
733
|
/** IAP's Google-managed service agent (forwards IAP traffic to Cloud Run). */
|
|
@@ -573,6 +777,8 @@ export interface RuntimeSecretBinding {
|
|
|
573
777
|
* on exactly the secrets its env reads ({@link SERVICE_SECRET_ENV}).
|
|
574
778
|
*/
|
|
575
779
|
export declare function runtimeSecretBindings(): RuntimeSecretBinding[];
|
|
780
|
+
/** The runtime SA each Cloud Run service runs as. */
|
|
781
|
+
export declare const SERVICE_PRINCIPAL: Readonly<Record<CloudRunSlug, IamPrincipal>>;
|
|
576
782
|
/**
|
|
577
783
|
* A binding an older stack declared that upgrade removes once nothing reads
|
|
578
784
|
* through it any more (after the rolls). Pulumi drops it on its own: the
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"stack-contract.d.ts","sourceRoot":"","sources":["../src/stack-contract.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAgBtD,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,cAAc,CAAC;AACjD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,SAAS,CAAC;AAE/C;;;;GAIG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,MAAM,IACjC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAC5C;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,YAAY,EAAE;YAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;KACzE,CAAC;CACH,CAAC;AAEN,yDAAyD;AACzD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wCAAwC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,8EAA8E;AAC9E,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,MAAM;IACtC,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;CACpB;AAKD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAQvD;AAED,kFAAkF;AAClF,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAE,SAAQ,gBAAgB;IACpE,+DAA+D;IAC/D,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,MAAM,IACjC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,CAAC,GACpD,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG;IACrB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;CAC5B,CAAC,CAAC;AAEP,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AAErD;;;GAGG;AACH,eAAO,MAAM,WAAW,kCAAkC,CAAC;AAE3D;;;GAGG;AACH,eAAO,MAAM,2BAA2B,8BAA8B,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AAEzD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,oBAAoB,CAAC;AACnD,eAAO,MAAM,4BAA4B,+BAA+B,CAAC;AAEzE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AACvD,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAC7D,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AASzD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,+BAA+B,CAAC;AAE7D,gDAAgD;AAChD,eAAO,MAAM,iBAAiB,UAAU,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,8CAA8C;AAC9C,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAMpF;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,mBAAmB;;;;;;;;;;;;;EAMnE;AAMD;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,sBAAsB,GACtB,YAAY,GACZ,iBAAiB,GACjB,sBAAsB,GACtB,qBAAqB;AACvB;;;;;;;;GAQG;GACD,uBAAuB;AACzB;;;GAGG;GACD,oBAAoB,CAAC;AAEzB,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,aAAa,CAAC;AAExD;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAG9E,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,oJAgBW,CAAC;AAE9C,+FAA+F;AAC/F,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAC5C,MAAM,CAAC,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC,CAYtE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAO7F,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CACvC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAyB9D,CAAC;AAMF,qFAAqF;AACrF,eAAO,MAAM,8BAA8B,qCAAqC,CAAC;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;CAC5B;AAED,4FAA4F;AAC5F,eAAO,MAAM,0BAA0B,EAAE,kBAMxC,CAAC;AAEF,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAE/D;AAED,uDAAuD;AACvD,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC,CAG9F,CAAC;AAEF,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,iBAAiB,EAAE,CAAC,CAU7F,CAAC;AAEF;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,MAAM,GACV;IACD,QAAQ,CAAC,OAAO,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,EAAE,CAAA;SAAE,CAAC;KACxE,EAAE,CAAC;IACJ,QAAQ,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC9D,CAYA;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,OAAO,EAAE,YAAY,GAAG,aAAa,EAAE,CAOrE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC,CAajF,CAAC;AAyBF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AAEjE;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAmBlF,CAAC;AAEF;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,CAU/F;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAE5C;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAKpE,CAAC;AAEF,oGAAoG;AACpG,eAAO,MAAM,+BAA+B,sCAAsC,CAAC;AAEnF,oFAAoF;AACpF,wBAAgB,iCAAiC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAExF;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,yCAAyC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,kDAAkD;AAClD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,iGAAiG;AACjG,MAAM,MAAM,uBAAuB,GAC/B;IACE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC,GACD;IACE,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC,CAAC;AAEN;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,uBAAuB,GAAG,iBAAiB,CAc/E;AAED,4DAA4D;AAC5D,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,iBAAiB,GACpB,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,CAmBxC;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAc9D,oFAAoF;AACpF,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,iBAAiB,GAAG,MAAM,CAExE;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,iBAAiB,GAAG,IAAI,CAiB9F;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,GAAG,SAAS,GACtB,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,CAGxC;AAED,mEAAmE;AACnE,wBAAgB,qBAAqB,CACnC,CAAC,EAAE,iBAAiB,GAAG,IAAI,EAC3B,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAC1B,OAAO,CAQT;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAAgC,CAAC;AAEvF;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,CAqE3F;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB;;;;;CAKpB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,YAAY;AACtB,gEAAgE;AAC9D,QAAQ;AACV,0CAA0C;GACxC,YAAY;AACd,6CAA6C;GAC3C,qBAAqB;AACvB,8EAA8E;GAC5E,mBAAmB,GACnB,UAAU,CAAC;AAEf,wDAAwD;AACxD,MAAM,MAAM,SAAS,GACjB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAKD,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,wEAAwE;IACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,oBAAoB,EAAE,CAS9D;AAiKD;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,iBAAiB,EAa5D,CAAC;AAEF,qEAAqE;AACrE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,GAAG,YAAY,EAAE,CAOxE;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiBvF,CAAC;AAEF,mEAAmE;AACnE,wBAAgB,SAAS,CACvB,SAAS,EAAE,YAAY,EACvB,OAAO,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC5F,MAAM,CAaR;AAMD,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAE7C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,6BAA6B,EAAE,SAAS,yBAAyB,EAiC7E,CAAC;AAEF,yEAAyE;AACzE,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,EAAE,EACvF,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,MAAM,CAKR;AAED,qFAAqF;AACrF,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,QAAQ,CAAC;AAE1C;;;GAGG;AACH;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG;IAC5D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAQA;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAcjE"}
|
|
1
|
+
{"version":3,"file":"stack-contract.d.ts","sourceRoot":"","sources":["../src/stack-contract.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAkBtD,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,cAAc,CAAC;AACjD;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAElE,kFAAkF;AAClF,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAA2C,CAAC;AAE/F;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,EACrB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,YAAY,GACjB,MAAM,CAOR;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,WAAW,EACrB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,YAAY,GACjB,MAAM,GAAG,IAAI,CAKf;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,MAAM,IACjC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAC5C;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,YAAY,EAAE;YAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;KACzE,CAAC;CACH,CAAC;AAEN,yDAAyD;AACzD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wCAAwC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,8EAA8E;AAC9E,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,MAAM;IACtC,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;CAC3B;AAKD;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAevD;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,0BAA0B,CAAC;AAEhE,wFAAwF;AACxF,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AAEnD,0FAA0F;AAC1F,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AAEvE;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,SAAS,GAC5F,MAAM,GAAG,IAAI,CAIf;AAED,qFAAqF;AACrF,eAAO,MAAM,iBAAiB;;;;CAOpB,CAAC;AAEX,kFAAkF;AAClF,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAE,SAAQ,gBAAgB;IACpE,+DAA+D;IAC/D,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,MAAM,IACjC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,CAAC,GACpD,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG;IACrB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;CAC5B,CAAC,CAAC;AAEP,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AAErD;;;GAGG;AACH,eAAO,MAAM,WAAW,kCAAkC,CAAC;AAE3D;;;GAGG;AACH,eAAO,MAAM,2BAA2B,8BAA8B,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AAEzD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,oBAAoB,CAAC;AACnD,eAAO,MAAM,4BAA4B,+BAA+B,CAAC;AAEzE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AACvD,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAC7D,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,oCAAoC,CAAC;AAEnF;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B;;;;CAA2C,CAAC;AAEnF;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,EAChC,MAAM,SAA6B,GAClC,MAAM,CAUR;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGrD;AASD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,+BAA+B,CAAC;AAE7D,gDAAgD;AAChD,eAAO,MAAM,iBAAiB,UAAU,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,8CAA8C;AAC9C,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAMpF;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,mBAAmB;;;;;;;;;;;;;EAMnE;AAMD;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,sBAAsB;AACxB,2EAA2E;GACzE,8BAA8B,GAC9B,YAAY,GACZ,iBAAiB,GACjB,sBAAsB,GACtB,qBAAqB;AACvB;;;;;;;;GAQG;GACD,uBAAuB;AACzB;;;GAGG;GACD,oBAAoB,CAAC;AAEzB,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,qBAAqB,CAAC;AAEhF;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAK9E,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,oLAmBW,CAAC;AAE9C;;;;;GAKG;AACH,eAAO,MAAM,oCAAoC,EAAE,QAAQ,CACzD,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAIhE,CAAC;AAEF,+FAA+F;AAC/F,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAC5C,MAAM,CAAC,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC,CAatE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAO7F,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CACvC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CA+B9D,CAAC;AAMF,qFAAqF;AACrF,eAAO,MAAM,8BAA8B,qCAAqC,CAAC;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;CAC5B;AAED,kHAAkH;AAClH,eAAO,MAAM,0BAA0B,EAAE,kBAMxC,CAAC;AAEF,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAE/D;AAED,oEAAoE;AACpE,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC,CAI9F,CAAC;AAEF,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,iBAAiB,EAAE,CAAC,CA0B7F,CAAC;AAEF;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,MAAM,GACV;IACD,QAAQ,CAAC,OAAO,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,EAAE,CAAA;SAAE,CAAC;KACxE,EAAE,CAAC;IACJ,QAAQ,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC9D,CAYA;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,OAAO,EAAE,YAAY,GAAG,aAAa,EAAE,CAOrE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC,CAqCjF,CAAC;AAyBF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAqBlF,CAAC;AAEF;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,CAU/F;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AAEtD,gDAAgD;AAChD,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,WAAW,GAAG,aAAa,CAAC,CAM5F,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAazF,CAAC;AAEF;;;;;;;;GAQG;AAGH,eAAO,MAAM,0BAA0B,iCAAiC,CAAC;AAEzE;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GAAG,cAAc,EAAE,CAanB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,oCAAoC,KAAK,CAAC;AAEvD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAMpE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAItE,CAAC;AAEF,oGAAoG;AACpG,eAAO,MAAM,+BAA+B,sCAAsC,CAAC;AAEnF,oFAAoF;AACpF,wBAAgB,iCAAiC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAExF;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,yCAAyC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,kDAAkD;AAClD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,iGAAiG;AACjG,MAAM,MAAM,uBAAuB,GAC/B;IACE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC,GACD;IACE,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,mFAAmF;IACnF,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC,CAAC;AAEN;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,uBAAuB,GAAG,iBAAiB,CAc/E;AAED,4DAA4D;AAC5D,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,iBAAiB,GACpB,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,CAsBxC;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAc9D,oFAAoF;AACpF,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,iBAAiB,GAAG,MAAM,CAExE;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,iBAAiB,GAAG,IAAI,CAiB9F;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,GAAG,SAAS,GACtB,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,CAGxC;AAED,mEAAmE;AACnE,wBAAgB,qBAAqB,CACnC,CAAC,EAAE,iBAAiB,GAAG,IAAI,EAC3B,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAC1B,OAAO,CAQT;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAAgC,CAAC;AAEvF;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,CA8E3F;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB;;;;;CAKpB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,YAAY;AACtB,gEAAgE;AAC9D,QAAQ;AACV,0CAA0C;GACxC,YAAY;AACd,kEAAkE;GAChE,mBAAmB;AACrB,6CAA6C;GAC3C,qBAAqB;AACvB,8EAA8E;GAC5E,mBAAmB,GACnB,UAAU,CAAC;AAEf,wDAAwD;AACxD,MAAM,MAAM,SAAS,GACjB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAKD,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,wEAAwE;IACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,oBAAoB,EAAE,CAS9D;AAED,qDAAqD;AACrD,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,CAI1E,CAAC;AA4KF;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,iBAAiB,EAiC5D,CAAC;AAEF,qEAAqE;AACrE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,GAAG,YAAY,EAAE,CAOxE;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiBvF,CAAC;AAEF,mEAAmE;AACnE,wBAAgB,SAAS,CACvB,SAAS,EAAE,YAAY,EACvB,OAAO,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC5F,MAAM,CAeR;AAMD,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAE7C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,6BAA6B,EAAE,SAAS,yBAAyB,EAiC7E,CAAC;AAEF,yEAAyE;AACzE,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,EAAE,EACvF,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,MAAM,CAKR;AAED,qFAAqF;AACrF,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,QAAQ,CAAC;AAE1C;;;GAGG;AACH;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG;IAC5D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAQA;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAcjE"}
|