@microagi/alchemy-gcp 0.1.2

package/lib/Container/Cluster.d.ts

@@ -0,0 +1,216 @@
+import { Resource } from "alchemy";
+import * as Provider from "alchemy/Provider";
+import type * as GCP from "../Providers.ts";
+import { type NodePoolProps } from "./NodePool.ts";
+/**
+ * Spec for the bootstrap node pool created inline with the cluster.
+ *
+ * Same shape as the create-time subset of `NodePoolProps`, minus the
+ * parent-identity fields (`project`, `location`, `clusterName`), which
+ * are inherited from the cluster.
+ */
+export type ClusterInitialNodePool = {
+    /** Pool name. Required — no default. Lowercase alphanumeric+hyphens, ≤40 chars. */
+    name: string;
+    /** Initial node count. Required — cluster needs nonzero capacity at create. */
+    initialNodeCount: number;
+    /** Per-pool zones. Defaults to the cluster's zone/region. */
+    nodeLocations?: ReadonlyArray<string>;
+    /** Node configuration (machine type, disk, accelerators, taints, …). */
+    config: NodePoolProps["config"];
+    /** Cluster autoscaler config. */
+    autoscaling?: NodePoolProps["autoscaling"];
+    /** Auto-upgrade / auto-repair. */
+    management?: NodePoolProps["management"];
+    /** Surge upgrade settings. */
+    upgradeSettings?: NodePoolProps["upgradeSettings"];
+};
+export type ClusterProps = {
+    /** GCP project ID hosting the cluster. Immutable — replace if changed. */
+    project: string;
+    /**
+     * GCP zone (e.g. `us-central1-a`) for a zonal cluster, or region
+     * (e.g. `us-central1`) for a regional cluster. Immutable — replace.
+     */
+    location: string;
+    /**
+     * Cluster name. Defaults to `createPhysicalName({ id, lowercase: true,
+     * maxLength: 40 })`. Lowercase alphanumeric + hyphens, ≤40 chars.
+     * Immutable — replace if changed.
+     */
+    name?: string;
+    /**
+     * Additional zones for cluster nodes. Mutable via `setLocations`.
+     */
+    nodeLocations?: ReadonlyArray<string>;
+    /**
+     * VPC short name or self-link. Omit to use the project's `default`
+     * VPC. Immutable — replace if changed.
+     */
+    network?: string;
+    /** Subnet within the VPC. Immutable — replace if changed. */
+    subnetwork?: string;
+    /**
+     * VPC-native settings. `useIpAliases: true` is GKE's default for new
+     * clusters and the only path that supports private clusters.
+     * Immutable — replace if changed.
+     */
+    ipAllocationPolicy?: {
+        useIpAliases?: boolean;
+        clusterIpv4CidrBlock?: string;
+        servicesIpv4CidrBlock?: string;
+        clusterSecondaryRangeName?: string;
+        servicesSecondaryRangeName?: string;
+    };
+    /** GKE release channel. Mutable via `update` (`desiredReleaseChannel`). */
+    releaseChannel?: {
+        channel: "RAPID" | "REGULAR" | "STABLE" | "UNSPECIFIED";
+    };
+    /**
+     * Workload Identity binds K8s SAs to GCP SAs. Format:
+     * `<projectId>.svc.id.goog`. Mutable via `update`.
+     */
+    workloadIdentityConfig?: {
+        workloadPool: string;
+    };
+    /** Cluster addons. Mutable via dedicated `setAddons`. */
+    addonsConfig?: {
+        httpLoadBalancing?: {
+            disabled?: boolean;
+        };
+        horizontalPodAutoscaling?: {
+            disabled?: boolean;
+        };
+        networkPolicyConfig?: {
+            disabled?: boolean;
+        };
+        gcePersistentDiskCsiDriverConfig?: {
+            enabled?: boolean;
+        };
+        gcsFuseCsiDriverConfig?: {
+            enabled?: boolean;
+        };
+        gkeBackupAgentConfig?: {
+            enabled?: boolean;
+        };
+        dnsCacheConfig?: {
+            enabled?: boolean;
+        };
+        configConnectorConfig?: {
+            enabled?: boolean;
+        };
+    };
+    /** Logging service. Mutable via `setLogging`. */
+    loggingService?: string;
+    /** Monitoring service. Mutable via `setMonitoring`. */
+    monitoringService?: string;
+    /** Maintenance window/exclusions. Mutable via `setMaintenancePolicy`. */
+    maintenancePolicy?: {
+        window?: {
+            dailyMaintenanceWindow?: {
+                startTime: string;
+            };
+            recurringWindow?: {
+                window: {
+                    startTime: string;
+                    endTime: string;
+                };
+                recurrence: string;
+            };
+        };
+    };
+    /**
+     * Network policy enforcement (e.g. Calico). Mutable via
+     * `setNetworkPolicy`. Requires `networkPolicyConfig` addon.
+     */
+    networkPolicy?: {
+        enabled?: boolean;
+        provider?: "PROVIDER_UNSPECIFIED" | "CALICO";
+    };
+    /**
+     * Resource labels. Alchemy internal labels (`alchemy_app`,
+     * `alchemy_stage`, `alchemy_id`) are merged on top automatically and
+     * are reserved. Mutable via `setResourceLabels`.
+     */
+    resourceLabels?: Record<string, string>;
+    /**
+     * Initial cluster version (`MASTER_DEFAULT` if omitted). Subsequent
+     * master upgrades are not exposed in v1.
+     */
+    initialClusterVersion?: string;
+    /**
+     * Bootstrap node pool created inline with the cluster. **Required.**
+     * GKE rejects cluster creation without at least one pool.
+     *
+     * Owned by the cluster — its `config.resourceLabels` are stamped
+     * with the cluster's `alchemy_*` internal labels at create time.
+     * Consumed only on the create path: after the cluster exists,
+     * `Cluster.reconcile` does NOT observe, sync, or mutate this pool,
+     * and changes to `initialNodePool` props on subsequent runs are a
+     * silent no-op (NOT diffed, NOT a replace trigger).
+     *
+     * Don't declare a separate `GCP.NodePool` for the same physical
+     * pool — it would key its own `alchemy_id` against a different
+     * logical id and `read` would return `Unowned(...)`. If you want
+     * post-create management of the bootstrap pool's size/config, do
+     * it via gcloud or expand `Cluster.reconcile` to sync it; declare
+     * additional pools (`compute`, `gpu`, …) as separate
+     * `GCP.NodePool` resources.
+     */
+    initialNodePool: ClusterInitialNodePool;
+};
+export type ClusterAttributes = {
+    /** Cluster name. */
+    name: string;
+    /** Server-defined URL. */
+    selfLink: string;
+    /** IP of the master endpoint. */
+    endpoint: string;
+    /** Base64-encoded master CA cert. */
+    clusterCaCertificate: string;
+    /** GCP project ID, threaded through from props for `delete`/`read`. */
+    project: string;
+    /** Zone or region, threaded through from props. */
+    location: string;
+    /** Current control-plane version. */
+    currentMasterVersion: string | undefined;
+    /** Lifecycle status. */
+    status: string | undefined;
+    /** Active release channel. */
+    releaseChannel: {
+        channel?: string;
+    } | undefined;
+    /** Resource labels currently set, including `alchemy_*` internals. */
+    resourceLabels: Record<string, string>;
+};
+/**
+ * A GKE Standard cluster.
+ *
+ * Lifecycle: observe → ensure (create with the user-supplied
+ * `initialNodePool` inline) → sync (labels, addons, maintenance,
+ * locations, network policy, logging, monitoring, generic update) →
+ * return.
+ *
+ * Adoption: a cluster whose `resourceLabels` lack our `alchemy_*` keys
+ * is wrapped in `Unowned(attrs)` from `read`, forcing the user to
+ * pass `--adopt` before takeover.
+ *
+ * @section Creating a cluster
+ * @example Minimal Standard cluster
+ * ```typescript
+ * const cluster = yield* GCP.Cluster("Main", {
+ *   project: project.projectId,
+ *   location: "us-central1-a",
+ *   releaseChannel: { channel: "REGULAR" },
+ *   initialNodePool: {
+ *     name: "system",
+ *     initialNodeCount: 1,
+ *     config: { machineType: "e2-medium" },
+ *   },
+ * });
+ * ```
+ */
+export type Cluster = Resource<"GCP.Cluster", ClusterProps, ClusterAttributes, never, GCP.Providers>;
+export declare const Cluster: import("alchemy").ResourceClass<Cluster>;
+export declare const ClusterProvider: () => import("effect/Layer").Layer<Provider.Provider<Cluster>, never, import("effect/unstable/http/HttpClient").HttpClient | import("alchemy").Stage | import("alchemy").Stack | import("@distilled.cloud/gcp").Credentials>;
+//# sourceMappingURL=Cluster.d.ts.map

package/lib/Container/Cluster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Cluster.d.ts","sourceRoot":"","sources":["../../src/Container/Cluster.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKnC,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAK7C,OAAO,KAAK,KAAK,GAAG,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,KAAK,aAAa,EAA0B,MAAM,eAAe,CAAC;AAG3E;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,gBAAgB,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,wEAAwE;IACxE,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChC,iCAAiC;IACjC,WAAW,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IAC3C,kCAAkC;IAClC,UAAU,CAAC,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IACzC,8BAA8B;IAC9B,eAAe,CAAC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE;QACnB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,yBAAyB,CAAC,EAAE,MAAM,CAAC;QACnC,0BAA0B,CAAC,EAAE,MAAM,CAAC;KACrC,CAAC;IACF,2EAA2E;IAC3E,cAAc,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,aAAa,CAAA;KAAE,CAAC;IAC7E;;;OAGG;IACH,sBAAsB,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,yDAAyD;IACzD,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAC3C,wBAAwB,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAClD,mBAAmB,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAC7C,gCAAgC,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QACzD,sBAAsB,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAC/C,oBAAoB,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAC7C,cAAc,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QACvC,qBAAqB,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KAC/C,CAAC;IACF,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,iBAAiB,CAAC,EAAE;QAClB,MAAM,CAAC,EAAE;YACP,sBAAsB,CAAC,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAA;aAAE,CAAC;YAC/C,eAAe,CAAC,EAAE;gBAChB,MAAM,EAAE;oBAAE,SAAS,EAAE,MAAM,CAAC;oBAAC,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC/C,UAAU,EAAE,MAAM,CAAC;aACpB,CAAC;SACH,CAAC;KACH,CAAC;IACF;;;OAGG;IACH,aAAa,CAAC,EAAE;QACd,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,sBAAsB,GAAG,QAAQ,CAAC;KAC9C,CAAC;IACF;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;;;;;;;;;OAkBG;IACH,eAAe,EAAE,sBAAsB,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,wBAAwB;IACxB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,8BAA8B;IAC9B,cAAc,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACjD,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,OAAO,GAAG,QAAQ,CAC5B,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,KAAK,EACL,GAAG,CAAC,SAAS,CACd,CAAC;AACF,eAAO,MAAM,OAAO,0CAAmC,CAAC;AA8CxD,eAAO,MAAM,eAAe,8NA0VzB,CAAC"}

package/lib/Container/Cluster.js

@@ -0,0 +1,326 @@
+import * as cont from "@distilled.cloud/gcp/container-v1";
+import { Resource } from "alchemy";
+import { Unowned } from "alchemy/AdoptPolicy";
+import { deepEqual, isResolved, somePropsAreDifferent } from "alchemy/Diff";
+import { createPhysicalName } from "alchemy/PhysicalName";
+import * as Provider from "alchemy/Provider";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { gcpInternalLabels, hasAlchemyLabels } from "../Tags.js";
+import { toNodeConfigCreateBody } from "./NodePool.js";
+import { makeAwaitOperation, qualifyOperationName } from "./Operations.js";
+export const Cluster = Resource("GCP.Cluster");
+/**
+ * Build the inline `NodePool` entry for the cluster create body.
+ *
+ * The cluster's alchemy internal labels (`alchemy_app`, `alchemy_stage`,
+ * `alchemy_id` keyed by the cluster's logical id) are merged into the
+ * pool's `config.resourceLabels`, marking the bootstrap pool as part
+ * of the cluster — not a free-standing resource that needs adoption.
+ * It is owned by the cluster, not by any `GCP.NodePool` resource; a
+ * separate `GCP.NodePool` declared with a different logical id will
+ * still see `Unowned(...)` from `read` (its own `alchemy_id` won't
+ * match), which is correct: that pool belongs to the cluster.
+ */
+const toInitialNodePoolBody = (spec, clusterInternalLabels) => ({
+    name: spec.name,
+    initialNodeCount: spec.initialNodeCount,
+    ...(spec.nodeLocations ? { locations: spec.nodeLocations } : {}),
+    config: toNodeConfigCreateBody(spec.config, {
+        ...(spec.config.resourceLabels ?? {}),
+        ...clusterInternalLabels,
+    }),
+    ...(spec.autoscaling ? { autoscaling: spec.autoscaling } : {}),
+    ...(spec.management ? { management: spec.management } : {}),
+    ...(spec.upgradeSettings ? { upgradeSettings: spec.upgradeSettings } : {}),
+});
+const toClusterAttributes = (c, parent) => ({
+    name: c.name ?? "",
+    selfLink: c.selfLink ?? "",
+    endpoint: c.endpoint ?? "",
+    clusterCaCertificate: c.masterAuth?.clusterCaCertificate ?? "",
+    project: parent.project,
+    location: parent.location,
+    currentMasterVersion: c.currentMasterVersion,
+    status: c.status,
+    releaseChannel: c.releaseChannel,
+    resourceLabels: { ...(c.resourceLabels ?? {}) },
+});
+export const ClusterProvider = () => Provider.effect(Cluster, Effect.gen(function* () {
+    const getClusters = yield* cont.getProjectsLocationsClusters;
+    const createClusters = yield* cont.createProjectsLocationsClusters;
+    const updateClusters = yield* cont.updateProjectsLocationsClusters;
+    const setAddons = yield* cont.setAddonsProjectsLocationsClusters;
+    const setLocations = yield* cont.setLocationsProjectsLocationsClusters;
+    const setMaintenance = yield* cont.setMaintenancePolicyProjectsLocationsClusters;
+    const setNetworkPolicy = yield* cont.setNetworkPolicyProjectsLocationsClusters;
+    const setResourceLabels = yield* cont.setResourceLabelsProjectsLocationsClusters;
+    const setLogging = yield* cont.setLoggingProjectsLocationsClusters;
+    const setMonitoring = yield* cont.setMonitoringProjectsLocationsClusters;
+    const deleteClusters = yield* cont.deleteProjectsLocationsClusters;
+    const getOperations = yield* cont.getProjectsLocationsOperations;
+    const awaitOperation = makeAwaitOperation(getOperations);
+    // Qualify a bare operation id using the parent path of the
+    // resource it targets — every fqName in this provider has the
+    // shape `projects/{p}/locations/{l}/clusters/{c}`, so the first
+    // four segments give us the parent context. Avoids threading
+    // project/location through every sync helper's args type.
+    const qualifyOp = (fqName, opName) => qualifyOperationName(fqName.split("/")[1], fqName.split("/")[3], opName);
+    const syncClusterLabels = Effect.fn(function* (args) {
+        if (deepEqual(args.observed.resourceLabels ?? {}, args.desired))
+            return;
+        // `setResourceLabels` requires `labelFingerprint` for optimistic
+        // concurrency — read it fresh from the observed cluster.
+        const op = yield* setResourceLabels({
+            name: args.fqName,
+            body: {
+                resourceLabels: args.desired,
+                labelFingerprint: args.observed.labelFingerprint,
+            },
+        });
+        if (op.name)
+            yield* awaitOperation(qualifyOp(args.fqName, op.name), args.session);
+    });
+    const syncClusterAddons = Effect.fn(function* (args) {
+        if (!args.news.addonsConfig)
+            return;
+        if (deepEqual(args.observed.addonsConfig, args.news.addonsConfig))
+            return;
+        const op = yield* setAddons({
+            name: args.fqName,
+            body: { addonsConfig: args.news.addonsConfig },
+        });
+        if (op.name)
+            yield* awaitOperation(qualifyOp(args.fqName, op.name), args.session);
+    });
+    const syncClusterMaintenance = Effect.fn(function* (args) {
+        if (!args.news.maintenancePolicy)
+            return;
+        if (deepEqual(args.observed.maintenancePolicy, args.news.maintenancePolicy))
+            return;
+        const op = yield* setMaintenance({
+            name: args.fqName,
+            body: { maintenancePolicy: args.news.maintenancePolicy },
+        });
+        if (op.name)
+            yield* awaitOperation(qualifyOp(args.fqName, op.name), args.session);
+    });
+    const syncClusterLocations = Effect.fn(function* (args) {
+        if (!args.news.nodeLocations)
+            return;
+        if (deepEqual(args.observed.locations ?? [], args.news.nodeLocations))
+            return;
+        const op = yield* setLocations({
+            name: args.fqName,
+            body: { locations: args.news.nodeLocations },
+        });
+        if (op.name)
+            yield* awaitOperation(qualifyOp(args.fqName, op.name), args.session);
+    });
+    const syncClusterNetworkPolicy = Effect.fn(function* (args) {
+        if (!args.news.networkPolicy)
+            return;
+        if (deepEqual(args.observed.networkPolicy, args.news.networkPolicy))
+            return;
+        const op = yield* setNetworkPolicy({
+            name: args.fqName,
+            body: { networkPolicy: args.news.networkPolicy },
+        });
+        if (op.name)
+            yield* awaitOperation(qualifyOp(args.fqName, op.name), args.session);
+    });
+    const syncClusterLogging = Effect.fn(function* (args) {
+        if (args.news.loggingService === undefined)
+            return;
+        if (args.observed.loggingService === args.news.loggingService)
+            return;
+        const op = yield* setLogging({
+            name: args.fqName,
+            body: { loggingService: args.news.loggingService },
+        });
+        if (op.name)
+            yield* awaitOperation(qualifyOp(args.fqName, op.name), args.session);
+    });
+    const syncClusterMonitoring = Effect.fn(function* (args) {
+        if (args.news.monitoringService === undefined)
+            return;
+        if (args.observed.monitoringService === args.news.monitoringService)
+            return;
+        const op = yield* setMonitoring({
+            name: args.fqName,
+            body: { monitoringService: args.news.monitoringService },
+        });
+        if (op.name)
+            yield* awaitOperation(qualifyOp(args.fqName, op.name), args.session);
+    });
+    // Catch-all generic update for fields without dedicated setters:
+    // currently `releaseChannel` and `workloadIdentityConfig`. The
+    // API auto-derives the field mask from which `desired*` keys are
+    // populated — no `updateMask` parameter needed.
+    const syncClusterUpdate = Effect.fn(function* (args) {
+        const update = {};
+        if (args.news.releaseChannel &&
+            !deepEqual(args.observed.releaseChannel, args.news.releaseChannel)) {
+            update.desiredReleaseChannel = args.news.releaseChannel;
+        }
+        if (args.news.workloadIdentityConfig &&
+            !deepEqual(args.observed.workloadIdentityConfig, args.news.workloadIdentityConfig)) {
+            update.desiredWorkloadIdentityConfig = args.news.workloadIdentityConfig;
+        }
+        if (Object.keys(update).length === 0)
+            return;
+        const op = yield* updateClusters({
+            name: args.fqName,
+            body: { update },
+        });
+        if (op.name)
+            yield* awaitOperation(qualifyOp(args.fqName, op.name), args.session);
+    });
+    return {
+        stables: [
+            "name",
+            "selfLink",
+            "project",
+            "location",
+            "endpoint",
+            "clusterCaCertificate",
+        ],
+        diff: Effect.fn(function* ({ news, olds = {} }) {
+            if (!isResolved(news))
+                return undefined;
+            if (somePropsAreDifferent(olds, news, [
+                "project",
+                "location",
+                "name",
+                "network",
+                "subnetwork",
+            ])) {
+                return { action: "replace" };
+            }
+            if (!deepEqual(olds.ipAllocationPolicy, news.ipAllocationPolicy)) {
+                return { action: "replace" };
+            }
+            // `initialNodePool` is intentionally NOT part of diff — it is
+            // consumed only on create. See ClusterProps JSDoc.
+            return undefined;
+        }),
+        reconcile: Effect.fn(function* ({ id, news, session }) {
+            const internalLabels = yield* gcpInternalLabels(id);
+            const desiredName = news.name ??
+                (yield* createPhysicalName({ id, maxLength: 40 })).toLowerCase();
+            const parent = `projects/${news.project}/locations/${news.location}`;
+            const fqName = `${parent}/clusters/${desiredName}`;
+            const desiredLabels = {
+                ...(news.resourceLabels ?? {}),
+                ...internalLabels,
+            };
+            // 1. Observe — collapse 403 to "missing" alongside 404. GCP
+            //    returns 403 for invisible resources/projects.
+            let observed = yield* getClusters({ name: fqName }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)), Effect.catchTag("Forbidden", () => Effect.succeed(undefined)));
+            // 2. Ensure — create with the user-supplied bootstrap pool
+            //    inline. No default-pool dance: an explicit
+            //    `nodePools: [...]` entry instructs GKE to skip the
+            //    implicit default. `Conflict` covers concurrent creates
+            //    and state-persistence races; fall through and re-observe.
+            if (!observed) {
+                const initialPoolBody = toInitialNodePoolBody(news.initialNodePool, internalLabels);
+                // GKE create can fire faster than ApiEnable's effect
+                // propagates: GCP returns 403 with "Kubernetes Engine API
+                // has not been used in project ... If you enabled this
+                // API recently, wait a few minutes …" even when the
+                // ApiEnable LRO has reported DONE. Retry the *create call*
+                // (not the LRO poll, which doesn't run until create
+                // succeeds) on this specific 403 for ~5 minutes; other
+                // Forbidden cases propagate normally.
+                const op = yield* createClusters({
+                    parent,
+                    body: {
+                        cluster: {
+                            name: desiredName,
+                            ...(news.network ? { network: news.network } : {}),
+                            ...(news.subnetwork ? { subnetwork: news.subnetwork } : {}),
+                            ...(news.ipAllocationPolicy
+                                ? { ipAllocationPolicy: news.ipAllocationPolicy }
+                                : {}),
+                            ...(news.releaseChannel ? { releaseChannel: news.releaseChannel } : {}),
+                            ...(news.workloadIdentityConfig
+                                ? { workloadIdentityConfig: news.workloadIdentityConfig }
+                                : {}),
+                            ...(news.addonsConfig ? { addonsConfig: news.addonsConfig } : {}),
+                            ...(news.loggingService ? { loggingService: news.loggingService } : {}),
+                            ...(news.monitoringService
+                                ? { monitoringService: news.monitoringService }
+                                : {}),
+                            ...(news.maintenancePolicy
+                                ? { maintenancePolicy: news.maintenancePolicy }
+                                : {}),
+                            ...(news.networkPolicy ? { networkPolicy: news.networkPolicy } : {}),
+                            ...(news.initialClusterVersion
+                                ? { initialClusterVersion: news.initialClusterVersion }
+                                : {}),
+                            ...(news.nodeLocations ? { locations: news.nodeLocations } : {}),
+                            resourceLabels: desiredLabels,
+                            nodePools: [initialPoolBody],
+                        },
+                    },
+                }).pipe(Effect.retry({
+                    while: (e) => e?._tag === "Forbidden" &&
+                        /enabled this API recently|has not been used/i.test(e.message ?? ""),
+                    schedule: Schedule.spaced(Duration.seconds(15)).pipe(Schedule.both(Schedule.recurs(20)), // 20 × 15s ≈ 5 min
+                    Schedule.tapOutput(() => session.note("Waiting for Container API enablement to propagate…"))),
+                }), Effect.catchTag("Conflict", () => Effect.succeed(undefined)));
+                if (op?.name)
+                    yield* awaitOperation(qualifyOp(fqName, op.name), session);
+                observed = yield* getClusters({ name: fqName });
+            }
+            // 3. Sync — each aspect independently idempotent. Re-observe
+            //    after the labels call so the fingerprint stays valid for
+            //    subsequent setters (although they don't all use it,
+            //    keeping the observed view fresh prevents subtle drift in
+            //    the deepEqual short-circuits below).
+            yield* syncClusterLabels({
+                fqName,
+                observed,
+                desired: desiredLabels,
+                session,
+            });
+            yield* syncClusterAddons({ fqName, observed, news, session });
+            yield* syncClusterMaintenance({ fqName, observed, news, session });
+            yield* syncClusterLocations({ fqName, observed, news, session });
+            yield* syncClusterNetworkPolicy({ fqName, observed, news, session });
+            yield* syncClusterLogging({ fqName, observed, news, session });
+            yield* syncClusterMonitoring({ fqName, observed, news, session });
+            yield* syncClusterUpdate({ fqName, observed, news, session });
+            const final = yield* getClusters({ name: fqName });
+            return toClusterAttributes(final, {
+                project: news.project,
+                location: news.location,
+            });
+        }),
+        delete: Effect.fn(function* ({ output, session }) {
+            const fqName = `projects/${output.project}/locations/${output.location}/clusters/${output.name}`;
+            yield* deleteClusters({ name: fqName }).pipe(Effect.flatMap((op) => op.name
+                ? awaitOperation(qualifyOp(fqName, op.name), session)
+                : Effect.succeed(op)), Effect.catchTag("NotFound", () => Effect.void));
+        }),
+        read: Effect.fn(function* ({ id, output, olds }) {
+            const project = output?.project ?? olds?.project;
+            const location = output?.location ?? olds?.location;
+            if (!project || !location)
+                return undefined;
+            const name = output?.name ??
+                olds?.name ??
+                (yield* createPhysicalName({ id, maxLength: 40 })).toLowerCase();
+            const fqName = `projects/${project}/locations/${location}/clusters/${name}`;
+            const observed = yield* getClusters({ name: fqName }).pipe(Effect.catchTag("NotFound", () => Effect.succeed(undefined)), Effect.catchTag("Forbidden", () => Effect.succeed(undefined)));
+            if (!observed)
+                return undefined;
+            const attrs = toClusterAttributes(observed, { project, location });
+            return (yield* hasAlchemyLabels(id, observed.resourceLabels))
+                ? attrs
+                : Unowned(attrs);
+        }),
+    };
+}));
+//# sourceMappingURL=Cluster.js.map

package/lib/Container/Cluster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Cluster.js","sourceRoot":"","sources":["../../src/Container/Cluster.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,mCAAmC,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAsB,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAiM3E,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAU,aAAa,CAAC,CAAC;AAExD;;;;;;;;;;;GAWG;AACH,MAAM,qBAAqB,GAAG,CAC5B,IAA4B,EAC5B,qBAA6C,EAC9B,EAAE,CAAC,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;IACvC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,EAAE,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE;QAC1C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;QACrC,GAAG,qBAAqB;KACzB,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAC3E,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAC1B,CAAe,EACf,MAA6C,EAC1B,EAAE,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;IAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;IAC1B,oBAAoB,EAAE,CAAC,CAAC,UAAU,EAAE,oBAAoB,IAAI,EAAE;IAC9D,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,oBAAoB,EAAE,CAAC,CAAC,oBAAoB;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,cAAc,EAAE,CAAC,CAAC,cAAc;IAChC,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAClC,QAAQ,CAAC,MAAM,CACb,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC7D,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC;IACnE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC;IACnE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC;IACjE,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC;IACvE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC;IACjF,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,yCAAyC,CAAC;IAC/E,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC;IACjF,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC;IACnE,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC;IACzE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC;IACnE,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC;IACjE,MAAM,cAAc,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAEzD,2DAA2D;IAC3D,8DAA8D;IAC9D,gEAAgE;IAChE,6DAA6D;IAC7D,0DAA0D;IAC1D,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,MAAc,EAAE,EAAE,CACnD,oBAAoB,CAClB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EACpB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EACpB,MAAM,CACP,CAAC;IAEJ,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAK9C;QACC,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO;QACxE,iEAAiE;QACjE,yDAAyD;QACzD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YAClC,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE;gBACJ,cAAc,EAAE,IAAI,CAAC,OAAO;gBAC5B,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;aACjD;SACF,CAAC,CAAC;QACH,IAAI,EAAE,CAAC,IAAI;YAAE,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAK9C;QACC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QACpC,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO;QAC1E,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;YAC1B,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;SAC/C,CAAC,CAAC;QACH,IAAI,EAAE,CAAC,IAAI;YAAE,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAKnD;QACC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO;QACzC,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;YAAE,OAAO;QACpF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;YAC/B,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;SACzD,CAAC,CAAC;QACH,IAAI,EAAE,CAAC,IAAI;YAAE,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAKjD;QACC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QACrC,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,OAAO;QAC9E,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;SAC7C,CAAC,CAAC;QACH,IAAI,EAAE,CAAC,IAAI;YAAE,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,MAAM,wBAAwB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAKrD;QACC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QACrC,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,OAAO;QAC5E,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;YACjC,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;SACjD,CAAC,CAAC;QACH,IAAI,EAAE,CAAC,IAAI;YAAE,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAK/C;QACC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO;QACnD,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QACtE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;YAC3B,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;SACnD,CAAC,CAAC;QACH,IAAI,EAAE,CAAC,IAAI;YAAE,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAKlD;QACC,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS;YAAE,OAAO;QACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,KAAK,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO;QAC5E,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;YAC9B,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;SACzD,CAAC,CAAC;QACH,IAAI,EAAE,CAAC,IAAI;YAAE,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,iEAAiE;IACjE,+DAA+D;IAC/D,iEAAiE;IACjE,gDAAgD;IAChD,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAK9C;QACC,MAAM,MAAM,GAAuB,EAAE,CAAC;QACtC,IACE,IAAI,CAAC,IAAI,CAAC,cAAc;YACxB,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAClE,CAAC;YACD,MAAM,CAAC,qBAAqB,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;QAC1D,CAAC;QACD,IACE,IAAI,CAAC,IAAI,CAAC,sBAAsB;YAChC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,EAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAClF,CAAC;YACD,MAAM,CAAC,6BAA6B,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC7C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;YAC/B,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,EAAE,MAAM,EAAE;SACjB,CAAC,CAAC;QACH,IAAI,EAAE,CAAC,IAAI;YAAE,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE;YACP,MAAM;YACN,UAAU;YACV,SAAS;YACT,UAAU;YACV,UAAU;YACV,sBAAsB;SACvB;QACD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE;YAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IACE,qBAAqB,CAAC,IAAoB,EAAE,IAAI,EAAE;gBAChD,SAAS;gBACT,UAAU;gBACV,MAAM;gBACN,SAAS;gBACT,YAAY;aACb,CAAC,EACF,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACjE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,8DAA8D;YAC9D,mDAAmD;YACnD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YACnD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACpD,MAAM,WAAW,GACf,IAAI,CAAC,IAAI;gBACT,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,YAAY,IAAI,CAAC,OAAO,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,GAAG,MAAM,aAAa,WAAW,EAAE,CAAC;YACnD,MAAM,aAAa,GAA2B;gBAC5C,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;gBAC9B,GAAG,cAAc;aAClB,CAAC;YAEF,4DAA4D;YAC5D,mDAAmD;YACnD,IAAI,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAqC,CAAC,CAAC,EACxF,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAqC,CAAC,CAAC,CAC1F,CAAC;YAEF,2DAA2D;YAC3D,gDAAgD;YAChD,wDAAwD;YACxD,4DAA4D;YAC5D,+DAA+D;YAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,eAAe,GAAG,qBAAqB,CAC3C,IAAI,CAAC,eAAe,EACpB,cAAc,CACf,CAAC;gBACF,qDAAqD;gBACrD,0DAA0D;gBAC1D,uDAAuD;gBACvD,oDAAoD;gBACpD,2DAA2D;gBAC3D,oDAAoD;gBACpD,uDAAuD;gBACvD,sCAAsC;gBACtC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;oBAC/B,MAAM;oBACN,IAAI,EAAE;wBACJ,OAAO,EAAE;4BACP,IAAI,EAAE,WAAW;4BACjB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAClD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC3D,GAAG,CAAC,IAAI,CAAC,kBAAkB;gCACzB,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;gCACjD,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACvE,GAAG,CAAC,IAAI,CAAC,sBAAsB;gCAC7B,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,EAAE;gCACzD,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACjE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACvE,GAAG,CAAC,IAAI,CAAC,iBAAiB;gCACxB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE;gCAC/C,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,IAAI,CAAC,iBAAiB;gCACxB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE;gCAC/C,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACpE,GAAG,CAAC,IAAI,CAAC,qBAAqB;gCAC5B,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,EAAE;gCACvD,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAChE,cAAc,EAAE,aAAa;4BAC7B,SAAS,EAAE,CAAC,eAAe,CAAC;yBAC7B;qBACF;iBACF,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC;oBACX,KAAK,EAAE,CAAC,CAAsC,EAAE,EAAE,CAChD,CAAC,EAAE,IAAI,KAAK,WAAW;wBACvB,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;oBACtE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAClD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,mBAAmB;oBACvD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,CACtB,OAAO,CAAC,IAAI,CACV,oDAAoD,CACrD,CACF,CACF;iBACF,CAAC,EACF,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,SAAuC,CAAC,CACxD,CACF,CAAC;gBACF,IAAI,EAAE,EAAE,IAAI;oBAAE,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;gBACzE,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,CAAC;YAED,6DAA6D;YAC7D,8DAA8D;YAC9D,yDAAyD;YACzD,8DAA8D;YAC9D,0CAA0C;YAC1C,KAAK,CAAC,CAAC,iBAAiB,CAAC;gBACvB,MAAM;gBACN,QAAQ;gBACR,OAAO,EAAE,aAAa;gBACtB,OAAO;aACR,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9D,KAAK,CAAC,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACnE,KAAK,CAAC,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACjE,KAAK,CAAC,CAAC,wBAAwB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACrE,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/D,KAAK,CAAC,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAClE,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAE9D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACnD,OAAO,mBAAmB,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,MAAM,MAAM,GAAG,YAAY,MAAM,CAAC,OAAO,cAAc,MAAM,CAAC,QAAQ,aAAa,MAAM,CAAC,IAAI,EAAE,CAAC;YACjG,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACpB,EAAE,CAAC,IAAI;gBACL,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;gBACrD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CACvB,EACD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YAC7C,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,EAAE,OAAO,CAAC;YACjD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,CAAC;YACpD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAC5C,MAAM,IAAI,GACR,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,IAAI;gBACV,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,YAAY,OAAO,cAAc,QAAQ,aAAa,IAAI,EAAE,CAAC;YAC5E,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CACxD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAqC,CAAC,CAAC,EACxF,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAqC,CAAC,CAAC,CAC1F,CAAC;YACF,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChC,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnE,OAAO,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;gBAC3D,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}