@namzu/sandbox 14.0.0 → 15.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +838 -0
- package/README.md +310 -14
- package/dist/backends/aci-standby-pool/index.d.ts.map +1 -1
- package/dist/backends/aci-standby-pool/index.js +13 -1
- package/dist/backends/aci-standby-pool/index.js.map +1 -1
- package/dist/backends/docker/index.d.ts.map +1 -1
- package/dist/backends/docker/index.js +19 -1
- package/dist/backends/docker/index.js.map +1 -1
- package/dist/backends/firecracker/index.d.ts.map +1 -1
- package/dist/backends/firecracker/index.js +12 -2
- package/dist/backends/firecracker/index.js.map +1 -1
- package/dist/backends/firecracker/protocol.d.ts +459 -8
- package/dist/backends/firecracker/protocol.d.ts.map +1 -1
- package/dist/backends/firecracker/protocol.js +136 -0
- package/dist/backends/firecracker/protocol.js.map +1 -1
- package/dist/backends/firecracker/transport.d.ts +539 -6
- package/dist/backends/firecracker/transport.d.ts.map +1 -1
- package/dist/backends/firecracker/transport.js +1171 -24
- package/dist/backends/firecracker/transport.js.map +1 -1
- package/dist/backends/kubernetes/egress-policy.d.ts +1088 -11
- package/dist/backends/kubernetes/egress-policy.d.ts.map +1 -1
- package/dist/backends/kubernetes/egress-policy.js +2173 -29
- package/dist/backends/kubernetes/egress-policy.js.map +1 -1
- package/dist/backends/kubernetes/identity.d.ts +193 -0
- package/dist/backends/kubernetes/identity.d.ts.map +1 -0
- package/dist/backends/kubernetes/identity.js +147 -0
- package/dist/backends/kubernetes/identity.js.map +1 -0
- package/dist/backends/kubernetes/index.d.ts +678 -33
- package/dist/backends/kubernetes/index.d.ts.map +1 -1
- package/dist/backends/kubernetes/index.js +1180 -95
- package/dist/backends/kubernetes/index.js.map +1 -1
- package/dist/backends/kubernetes/ingress-policy.d.ts +375 -0
- package/dist/backends/kubernetes/ingress-policy.d.ts.map +1 -0
- package/dist/backends/kubernetes/ingress-policy.js +1050 -0
- package/dist/backends/kubernetes/ingress-policy.js.map +1 -0
- package/dist/backends/kubernetes/k8s-client.d.ts +213 -4
- package/dist/backends/kubernetes/k8s-client.d.ts.map +1 -1
- package/dist/backends/kubernetes/k8s-client.js +359 -52
- package/dist/backends/kubernetes/k8s-client.js.map +1 -1
- package/dist/backends/kubernetes/lease.d.ts +40 -14
- package/dist/backends/kubernetes/lease.d.ts.map +1 -1
- package/dist/backends/kubernetes/lease.js +68 -18
- package/dist/backends/kubernetes/lease.js.map +1 -1
- package/dist/backends/kubernetes/objects.d.ts +423 -3
- package/dist/backends/kubernetes/objects.d.ts.map +1 -1
- package/dist/backends/kubernetes/objects.js +364 -2
- package/dist/backends/kubernetes/objects.js.map +1 -1
- package/dist/backends/kubernetes/per-sandbox-policy.d.ts +219 -0
- package/dist/backends/kubernetes/per-sandbox-policy.d.ts.map +1 -0
- package/dist/backends/kubernetes/per-sandbox-policy.js +407 -0
- package/dist/backends/kubernetes/per-sandbox-policy.js.map +1 -0
- package/dist/backends/kubernetes/rbac.d.ts +153 -0
- package/dist/backends/kubernetes/rbac.d.ts.map +1 -0
- package/dist/backends/kubernetes/rbac.js +177 -0
- package/dist/backends/kubernetes/rbac.js.map +1 -0
- package/dist/backends/kubernetes/sandbox.d.ts +81 -14
- package/dist/backends/kubernetes/sandbox.d.ts.map +1 -1
- package/dist/backends/kubernetes/sandbox.js +149 -15
- package/dist/backends/kubernetes/sandbox.js.map +1 -1
- package/dist/backends/kubernetes/transport.d.ts +935 -9
- package/dist/backends/kubernetes/transport.d.ts.map +1 -1
- package/dist/backends/kubernetes/transport.js +1958 -62
- package/dist/backends/kubernetes/transport.js.map +1 -1
- package/dist/backends/kubernetes/workspace.d.ts +1149 -18
- package/dist/backends/kubernetes/workspace.d.ts.map +1 -1
- package/dist/backends/kubernetes/workspace.js +2825 -186
- package/dist/backends/kubernetes/workspace.js.map +1 -1
- package/dist/backends/remote-execution-controller.d.ts +14 -0
- package/dist/backends/remote-execution-controller.d.ts.map +1 -1
- package/dist/backends/remote-execution-controller.js.map +1 -1
- package/dist/index.d.ts +231 -13
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +247 -5
- package/dist/index.js.map +1 -1
- package/dist/testing/sandbox-conformance.d.ts +39 -5
- package/dist/testing/sandbox-conformance.d.ts.map +1 -1
- package/dist/testing/sandbox-conformance.js +436 -5
- package/dist/testing/sandbox-conformance.js.map +1 -1
- package/package.json +3 -3
- package/src/backends/aci-standby-pool/index.ts +16 -1
- package/src/backends/docker/index.ts +22 -1
- package/src/backends/firecracker/index.ts +14 -2
- package/src/backends/firecracker/protocol.ts +514 -6
- package/src/backends/firecracker/transport.ts +1492 -40
- package/src/backends/kubernetes/egress-policy.ts +3064 -53
- package/src/backends/kubernetes/identity.ts +261 -0
- package/src/backends/kubernetes/index.ts +1785 -127
- package/src/backends/kubernetes/ingress-policy.ts +1344 -0
- package/src/backends/kubernetes/k8s-client.ts +444 -54
- package/src/backends/kubernetes/lease.ts +75 -19
- package/src/backends/kubernetes/objects.ts +626 -6
- package/src/backends/kubernetes/per-sandbox-policy.ts +542 -0
- package/src/backends/kubernetes/rbac.ts +192 -0
- package/src/backends/kubernetes/sandbox.ts +218 -20
- package/src/backends/kubernetes/transport.ts +2733 -124
- package/src/backends/kubernetes/workspace.ts +4476 -222
- package/src/backends/remote-execution-controller.ts +14 -0
- package/src/index.ts +595 -14
- package/src/testing/sandbox-conformance.ts +540 -5
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/backends/kubernetes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsFG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAG9C,OAAO,EACN,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GACjB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAEN,+BAA+B,EAC/B,uBAAuB,EACvB,qBAAqB,EACrB,yBAAyB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAEN,0BAA0B,EAE1B,sBAAsB,GACtB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAGN,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,4BAA4B,EAM5B,mBAAmB,EACnB,SAAS,EACT,eAAe,EACf,SAAS,EACT,WAAW,EACX,OAAO,EACP,qBAAqB,EACrB,WAAW,EACX,oBAAoB,EACpB,mBAAmB,GACnB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AA6GzD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAEtC;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,EAAE,CAAA;AAChC,MAAM,wBAAwB,GAAG,MAAM,CAAA;AACvC,MAAM,yBAAyB,GAAG,KAAK,CAAA;AAEvC;;;;;;;;;;;GAWG;AACH,MAAM,8BAA8B,GAAG,MAAM,CAAA;AAE7C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,cAAsB;IAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,8BAA8B,CAAC,CAAA;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAG1C;IACA,OAAO,uBAAuB,CAAC,YAAY,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,mBAAmB,EAAE;QAC/F,SAAS,EAAE,wBAAwB;QACnC,cAAc,EAAE,qBAAqB;KACrC,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,gCAAgC,GAAG;IACxC,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IACnC,CAAC,eAAe,EAAE,cAAc,CAAC;IACjC,CAAC,cAAc,EAAE,eAAe,CAAC;IACjC,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACvB,CAAA;AAEV,MAAM,UAAU,iBAAiB,CAAC,OAA8B;IAC/D,MAAM,aAAa,GAAG,gCAAgC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE;QACvE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC1B,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IACF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAEtC,MAAM,IAAI,KAAK,CACd,6DAA6D,aAAa;SACxE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;SACzB,IAAI,CACJ,IAAI,CACJ,sYAAsY,CACxY,CAAA;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAG9C;IACA,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,OAAM;IACtF,MAAM,IAAI,KAAK,CACd,gEAAgE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,yPAAyP,CAC3a,CAAA;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAuC;IAC7E,MAAM,SAAS,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAA;IACpD,8BAA8B,CAAC,MAAM,CAAC,CAAA;IACtC,iEAAiE;IACjE,kEAAkE;IAClE,wEAAwE;IACxE,iEAAiE;IACjE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,+BAA+B,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAA;IACtF,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3D,4EAA4E;IAC5E,uEAAuE;IACvE,uEAAuE;IACvE,gEAAgE;IAChE,IAAI,kBAA6C,CAAA;IACjD,OAAO;QACN,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,YAAY;QAClB,KAAK,CAAC,MAAM,CAAC,OAA8B;YAC1C,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,kBAAkB,KAAK,4BAA4B,CAClD,MAAM,EACN,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,mBAAmB,EAC1B,MAAM,CAAC,MAAM,EACb,OAAO,CAAC,MAAM,CACd,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;oBACxB,kBAAkB,GAAG,SAAS,CAAA;oBAC9B,MAAM,GAAG,CAAA;gBACV,CAAC,CAAC,CAAA;gBACF,MAAM,kBAAkB,CAAA;YACzB,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;YACtF,OAAO,MAAM,kBAAkB,CAC9B,WAAW,EACX,MAAM,EACN,OAAO,EACP,qBAAqB,CAAC,SAAS,CAAC,SAAS,CAAC,CAC1C,CAAA;QACF,CAAC;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,MAAwB,EACxB,SAAiB,EACjB,mBAA2B,EAC3B,MAA8B,EAC9B,MAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAA;IACtC,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE;QACrE,SAAS;QACT,IAAI,EAAE,MAAM,CAAC,iBAAiB,IAAI,uBAAuB,CAAC,mBAAmB,CAAC;QAC9E,mBAAmB;KACnB,CAAC,CAAA;IACF,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;AAC5D,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,MAAuC;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IACzD,OAAO;QACN,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAA;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,MAAwB,EACxB,MAAuC,EACvC,OAA8B,EAC9B,SAA0E;IAE1E,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC1B,8BAA8B,CAAC,MAAM,CAAC,CAAA;IAEtC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IAClC,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,IAAI,yBAAyB,CAAA;IACtE,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,UAAU,GAAG,cAAc,iBAAiB,EAAE,EAAE,CAAA;IACtD,MAAM,SAAS,GACd,MAAM,CAAC,YAAY,KAAK,SAAS;QAChC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC;QAClC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAEtC,MAAM,OAAO,GAAG,KAAK,EAAE,MAAoB,EAAiB,EAAE;QAC7D,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,gEAAgE;YAChE,IAAI,CAAC,CAAC,GAAG,YAAY,0BAA0B,CAAC;gBAAE,MAAM,GAAG,CAAA;QAC5D,CAAC;IACF,CAAC,CAAA;IAED,uEAAuE;IACvE,oEAAoE;IACpE,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,8DAA8D;IAC9D,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,KAAK,GAAG,KAAK,EAAE,gBAAwB,EAAE,MAAoB,EAAiB,EAAE;QACrF,MAAM,KAAK,GACV,MAAM,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,EAAE,EAAE;YAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,EAAE,CAAA;QAChD,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IACxD,CAAC,CAAA;IAED,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CACrC,SAAS,CAAC,SAAS,EACnB,sBAAsB,EACtB,OAAO,CAAC,MAAM,CACd,CAAA;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,mDAAmD;IACnD,MAAM,UAAU,GACf,MAAM,CAAC,YAAY,KAAK,SAAS;QAChC,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;QAChC,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAA;IACpC,MAAM,UAAU,GACf,MAAM,CAAC,YAAY,KAAK,SAAS;QAChC,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC;QAC1E,CAAC,CAAC,gBAAgB,CAAC;YACjB,SAAS;YACT,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACvC,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAC1E;YACD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,YAAY;YACZ,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;SACN,CAAC,CAAA;IAEL,IAAI,CAAC;QACJ,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;QACtF,MAAM,OAAO,GACZ,MAAM,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,MAAM,cAAc,CACpB,KAAK,EAAE,MAAM,EAAE,EAAE,CAChB,gBAAgB,CACf,MAAM,MAAM,CAAC,OAAO,CACnB,KAAK,EACL,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC,EAChC,SAAS,EACT,MAAM,CACN,EACD,UAAU,CACV,EACF,QAAQ,EACR,SAAS,EACT,SAAS,UAAU,EAAE,CACrB;YACF,CAAC,CAAC,MAAM,cAAc,CACpB,KAAK,EAAE,MAAM,EAAE,EAAE,CAChB,kBAAkB,CACjB,MAAM,MAAM,CAAC,OAAO,CACnB,KAAK,EACL,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,EAClC,SAAS,EACT,MAAM,CACN,CACD,EACF,QAAQ,EACR,SAAS,EACT,WAAW,UAAU,EAAE,CACvB,CAAA;QAEJ,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3C,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CACpD,CAAA;QACD,OAAO;YACN,OAAO;YACP,KAAK,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,IAAI,kBAAkB,EAAE,KAAK,CAAC;YAClF,SAAS;YACT,UAAU;YACV,OAAO;YACP,KAAK;SACL,CAAA;IACF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,qEAAqE;QACrE,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;QACtB,CAAC,CAAC,CAAA;QACF,MAAM,GAAG,CAAA;IACV,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CACtB,SAAiB,EACjB,IAAY,EACZ,YAAoB,EACpB,YAAoB;IAEpB,OAAO;QACN,UAAU,EAAE,GAAG,4BAA4B,IAAI,mBAAmB,EAAE;QACpE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC7B,IAAI,EAAE;YACL,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;YACnC,SAAS,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE;SACrD;KACD,CAAA;AACF,CAAC;AAuBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAA;IAChD,MAAM,IAAI,GACT,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACrC,CAAC,CAAC,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;QACrE,CAAC,CAAC,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,CAAA;IAC3B,MAAM,QAAQ,GAAG;QAChB,GAAG,WAAW,CAAC,QAAQ;QACvB,MAAM,EAAE;YACP,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM;YAC/B,GAAG,oBAAoB,CAAC,OAAO,CAAC,mBAAmB,CAAC;SACpD;KACD,CAAA;IACD,OAAO;QACN,UAAU,EAAE,GAAG,iBAAiB,IAAI,mBAAmB,EAAE;QACzD,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;QAC9D,IAAI,EAAE;YACL,aAAa,EAAE,SAAS;YACxB,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE;gBAClE,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS;gBACtD,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,EAAE;gBACjE,CAAC,CAAC,EAAE,CAAC;YACN,WAAW,EAAE,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC/C;KACD,CAAA;AACF,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAwB,EACxB,SAAiB,EACjB,mBAA2B,EAC3B,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CACpC,KAAK,EACL,mBAAmB,CAAC,SAAS,EAAE,mBAAmB,CAAC,EACnD,SAAS,EACT,MAAM,CACN,CAAA;IACD,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAA;IAC/C,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CACd,+BAA+B,mBAAmB,iBAAiB,SAAS,mKAAmK,CAC/O,CAAA;IACF,CAAC;IACD,MAAM,oBAAoB,GAAG,QAAQ,EAAE,IAAI,EAAE,oBAAoB,CAAA;IACjE,OAAO;QACN,WAAW;QACX,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAA;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAClC,OAAiC,EACjC,SAAiB,EACjB,KAAa;IAEb,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;IACvD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACd,uBAAuB,OAAO,CAAC,IAAI,kKAAkK,CACrM,CAAA;IACF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;AACrD,CAAC;AAED,SAAS,gBAAgB,CACxB,KAAuC,EACvC,SAAiB;IAEjB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,CAAC;QAAE,OAAO,SAAS,CAAA;IAClF,MAAM,KAAK,GAAG,KAAK,EAAE,MAAM,EAAE,OAAO,CAAA;IACpC,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACd,4BAA4B,SAAS,8FAA8F,CACnI,CAAA;IACF,CAAC;IACD,OAAO;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAA;AACF,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CACjC,OAAoC;IAEpC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,CAAC;QAAE,OAAO,SAAS,CAAA;IACpF,MAAM,IAAI,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAA;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAA;IAC9B,OAAO;QACN,IAAI;QACJ,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,MAAM,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,IAA4E,EAC5E,QAA2B,EAC3B,SAA0E,EAC1E,KAAa;IAEb,OAAO,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACxC,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAA;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,wBAAwB;gBAAE,MAAK;YAClD,MAAM,GAAG,CAAA;QACV,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,wBAAwB;gBAAE,MAAK;YAClD,MAAM,GAAG,CAAA;QACV,CAAC;IACF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,wBAAwB,SAAS,CAAC,SAAS,KAAK,CAAC,CAAA;AACtF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,MAAwB,EACxB,SAAiB,EACjB,OAAiC,EACjC,MAAoB;IAEpB,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAC/B,KAAK,EACL,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,EAChC,SAAS,EACT,MAAM,CACN,CAAA;QACD,MAAM,GAAG,GAAG,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAA;QAC9B,sEAAsE;QACtE,4DAA4D;QAC5D,qEAAqE;QACrE,gEAAgE;QAChE,0CAA0C;QAC1C,IAAI,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAA;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,CAAC,GAAG,YAAY,0BAA0B,CAAC;YAAE,MAAM,GAAG,CAAA;IAC5D,CAAC;IAED,MAAM,QAAQ,GACb,OAAO,CAAC,WAAW,IAAI,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IACvF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAChC,KAAK,EACL,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,EAChC,SAAS,EACT,MAAM,CACN,CAAA;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAA;YAC7B,IAAI,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAA;QACtC,CAAC;IACF,CAAC;IACD,MAAM,IAAI,KAAK,CACd,oDAAoD,OAAO,CAAC,IAAI,iBAAiB,SAAS,+QAA+Q,CACzW,CAAA;AACF,CAAC;AAED,KAAK,UAAU,mBAAmB,CACjC,MAAwB,EACxB,SAAiB,EACjB,OAAiC,EACjC,MAAoB;IAEpB,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CACnC,KAAK,EACL,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,EACpC,SAAS,EACT,MAAM,CACN,CAAA;QACD,OAAO,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,YAAY,0BAA0B;YAAE,OAAO,SAAS,CAAA;QAC/D,MAAM,GAAG,CAAA;IACV,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,KAAK,UAAU,kBAAkB,CAChC,WAAkC,EAClC,MAAuC,EACvC,OAA8B,EAC9B,cAAsB;IAEtB,MAAM,OAAO,GAAG,sBAAsB,CAAC;QACtC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI;QAC9B,OAAO,EAAE,OAAO,CAAC,gBAAgB;QACjC,SAAS,EAAE,IAAI,wBAAwB,CAAC,WAAW,CAAC,KAAK,CAAC;QAC1D,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,GAAG,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,mBAAmB,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACN,CAAC,CAAA;IACF,IAAI,CAAC;QACJ,MAAM,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAChG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;QACF,MAAM,GAAG,CAAA;IACV,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,OAAgB,EAChB,WAAmB,EACnB,cAAsB,EACtB,MAAoB;IAEpB,yEAAyE;IACzE,mEAAmE;IACnE,oEAAoE;IACpE,MAAM,UAAU,GAAG,8BAA8B,WAAW,EAAE,CAAA;IAC9D,IAAI,CAAC;QACJ,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,oEAAoE;QACpE,oEAAoE;QACpE,sEAAsE;QACtE,oDAAoD;QACpD,MAAM,IAAI,iBAAiB,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,GAAG,CAClE,KAAK,EAAE,UAAU,EAAE,EAAE,CACpB,MAAM,iBAAiB,CACtB,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAClF,WAAW,CACX,CACF,CAAA;QACD,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,yDAAyD;QACzD,MAAM,EAAE,cAAc,EAAE,CAAA;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,sEAAsE;QACtE,6DAA6D;QAC7D,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,qEAAqE;QACrE,sEAAsE;QACtE,gEAAgE;QAChE,IAAI,GAAG,YAAY,wBAAwB,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACzE,MAAM,sBAAsB,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,CAAC,CAAA;QAC/D,CAAC;QACD,MAAM,GAAG,CAAA;IACV,CAAC;AACF,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/backends/kubernetes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyGG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAG9C,OAAO,EACN,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GACjB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAGN,kCAAkC,EAClC,gCAAgC,EAEhC,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,EAC9B,0BAA0B,EAC1B,uBAAuB,EACvB,kBAAkB,EAClB,8BAA8B,EAC9B,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,GACvB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAEN,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,GAC1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAEN,0BAA0B,EAC1B,kBAAkB,EAClB,yBAAyB,EAGzB,yBAAyB,EACzB,sBAAsB,GACtB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAIN,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,4BAA4B,EAQ5B,mBAAmB,EACnB,aAAa,EACb,SAAS,EACT,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,WAAW,EACX,OAAO,EACP,SAAS,EACT,qBAAqB,EACrB,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,GACZ,MAAM,cAAc,CAAA;AACrB,OAAO,EACN,8BAA8B,EAE9B,mBAAmB,EACnB,2BAA2B,GAC3B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AA2HzD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAA;AAEjD;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAyB;IACjE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,2BAA2B,CAAA;IAC3D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACd,qEAAqE,IAAI,CAAC,SAAS,CAClF,KAAK,CACL,4GAA4G,2BAA2B,KAAK,CAC7I,CAAA;IACF,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAuC;IACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAA;AACxD,CAAC;AAiGD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAEtC;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,EAAE,CAAA;AAChC,MAAM,wBAAwB,GAAG,MAAM,CAAA;AACvC,MAAM,yBAAyB,GAAG,KAAK,CAAA;AAEvC;;;;;;;;;;;GAWG;AACH,MAAM,8BAA8B,GAAG,MAAM,CAAA;AAE7C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,cAAsB;IAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,8BAA8B,CAAC,CAAA;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAG1C;IACA,OAAO,uBAAuB,CAAC,YAAY,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,mBAAmB,EAAE;QAC/F,SAAS,EAAE,wBAAwB;QACnC,cAAc,EAAE,qBAAqB;KACrC,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,gCAAgC,GAAG;IACxC,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IACnC,CAAC,eAAe,EAAE,cAAc,CAAC;IACjC,CAAC,cAAc,EAAE,eAAe,CAAC;IACjC,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACvB,CAAA;AAEV,MAAM,UAAU,iBAAiB,CAAC,OAA8B;IAC/D,MAAM,aAAa,GAAG,gCAAgC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE;QACvE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC1B,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IACF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAEtC,MAAM,IAAI,KAAK,CACd,6DAA6D,aAAa;SACxE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;SACzB,IAAI,CACJ,IAAI,CACJ,sYAAsY,CACxY,CAAA;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAG9C;IACA,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,OAAM;IACtF,MAAM,IAAI,KAAK,CACd,gEAAgE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,yPAAyP,CAC3a,CAAA;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAuC;IAC7E,MAAM,SAAS,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAA;IACpD,8BAA8B,CAAC,MAAM,CAAC,CAAA;IACtC,iEAAiE;IACjE,kEAAkE;IAClE,wEAAwE;IACxE,iEAAiE;IACjE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,+BAA+B,CAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,EACpB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,EAC9B,MAAM,CAAC,MAAM,CAAC,eAAe,CAC7B,CAAA;IACF,CAAC;IACD,sEAAsE;IACtE,oEAAoE;IACpE,qEAAqE;IACrE,qBAAqB;IACrB,2BAA2B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC1C,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,yEAAyE;IACzE,yCAAyC;IACzC,8BAA8B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC7C,oEAAoE;IACpE,yEAAyE;IACzE,gEAAgE;IAChE,wBAAwB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IAClF,4EAA4E;IAC5E,uEAAuE;IACvE,uEAAuE;IACvE,oEAAoE;IACpE,wEAAwE;IACxE,gEAAgE;IAChE,gDAAgD;IAChD,MAAM,cAAc,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAA;IACtF,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,eAAe,GAAG,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,4DAA4D;IAC5D,+DAA+D;IAC/D,oEAAoE;IACpE,4CAA4C;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAA;IAC5C,MAAM,KAAK,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAC5F,OAAO;QACN,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,YAAY;QAClB,KAAK,CAAC,MAAM,CAAC,OAA8B;YAC1C,MAAM,cAAc,EAAE,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACvD,MAAM,WAAW,GAAG,MAAM,wBAAwB,CACjD,MAAM,EACN,MAAM,EACN,OAAO,EACP,SAAS,EACT,eAAe,EACf,cAAc,CACd,CAAA;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,MAAM,gBAAgB,GACrB,KAAK,KAAK,SAAS;gBACnB,MAAM,EAAE,UAAU,KAAK,SAAS;gBAChC,WAAW,CAAC,KAAK,KAAK,SAAS;gBAC/B,WAAW,CAAC,oBAAoB,KAAK,SAAS;gBAC7C,CAAC,CAAC,2BAA2B,CAAC;oBAC5B,MAAM;oBACN,KAAK;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;oBACpD,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,aAAa,EAAE,WAAW,CAAC,oBAAoB;iBAC/C,CAAC;gBACH,CAAC,CAAC,SAAS,CAAA;YACb,OAAO,MAAM,kBAAkB,CAC9B,WAAW,EACX,MAAM,EACN,OAAO,EACP,qBAAqB,CAAC,SAAS,CAAC,SAAS,CAAC,EAC1C,gBAAgB,CAChB,CAAA;QACF,CAAC;KACD,CAAA;AACF,CAAC;AAoCD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAA;AAQvD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAClC,MAAwB,EACxB,MAAuC,EACvC,mBAA2B,EAC3B,MAAoB,IAAI,CAAC,GAAG;IAE5B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAA;IACtC,0EAA0E;IAC1E,uEAAuE;IACvE,kEAAkE;IAClE,sEAAsE;IACtE,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG;QACd,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,MAAM,CAAC,iBAAiB,IAAI,uBAAuB,CAAC,mBAAmB,EAAE,OAAO,EAAE,KAAK,CAAC;QAC9F,mBAAmB;QACnB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAA;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,sDAAsD;IACtD,IAAI,WAAkE,CAAA;IACtE,MAAM,SAAS,GAAG,GAA8C,EAAE;QACjE,WAAW,KAAK,qBAAqB,CACpC,MAAM,CAAC,MAAM,EACb,MAAM,EACN,MAAM,EACN,MAAM,CAAC,eAAe,CACtB,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACxB,WAAW,GAAG,SAAS,CAAA;YACvB,MAAM,GAAG,CAAA;QACV,CAAC,CAAC,CAAA;QACF,OAAO,WAAW,CAAA;IACnB,CAAC,CAAA;IACD,IAAI,WAAsC,CAAA;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC5C,qEAAqE;IACrE,yEAAyE;IACzE,mEAAmE;IACnE,oEAAoE;IACpE,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACtD,OAAO;QACN,KAAK,CAAC,iBAAiB,CAAC,MAAM;YAC7B,WAAW,KAAK,CAAC,KAAK,IAAI,EAAE;gBAC3B,MAAM,yBAAyB,CAAC,MAAM,EAAE,MAAM,SAAS,EAAE,EAAE,MAAM,CAAC,CAAA;YACnE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC3B,WAAW,GAAG,SAAS,CAAA;gBACvB,MAAM,GAAG,CAAA;YACV,CAAC,CAAC,CAAA;YACF,MAAM,WAAW,CAAA;QAClB,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM;YAC3C,IAAI,CAAC,8BAA8B,CAAC,MAAM,CAAC;gBAAE,OAAM;YACnD,MAAM,UAAU,GAAG,MAAM,SAAS,EAAE,CAAA;YACpC,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;YACpD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,yBAAyB,EAAE,CAAC;gBAC3E,MAAM,MAAM,CAAC,OAAO,CAAA;gBACpB,OAAM;YACP,CAAC;YACD,MAAM,OAAO,GAAG,uBAAuB,CACtC,MAAM,EACN,UAAU,EACV,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAC3D,MAAM,CACN,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACxB,gEAAgE;gBAChE,uBAAuB;gBACvB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAClB,MAAM,GAAG,CAAA;YACV,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YACvC,MAAM,OAAO,CAAA;QACd,CAAC;KACD,CAAA;AACF,CAAC;AAaD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,cAAc,CAAC,SAA2C,EAAE,UAAmB;IACvF,OAAO,IAAI,CAAC,SAAS,CACpB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC;SACjC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAClD,CAAA;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CACnC,MAAwB,EACxB,MAAuC,EACvC,KAAkC;IAElC,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IACjE,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACxD,iEAAiE;IACjE,sEAAsE;IACtE,yDAAyD;IACzD,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QACrF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;YACxD,OAAM;QACP,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;QACpD,IAAI,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACnF,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACjB,MAAM,GAAG,CAAA;YACV,CAAC,CAAC,CAAA;YACF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACxB,CAAC;QACD,MAAM,OAAO,CAAA;IACd,CAAC,CAAA;AACF,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,MAAuC;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IACzD,OAAO;QACN,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAA;AACF,CAAC;AAsCD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC9B,IAAI,GAAG,wBAAwB,CAAA;IACxC,MAAM,CAAgC;IAC/C,yEAAyE;IAChE,SAAS,CAAS;IAC3B;;;;;OAKG;IACM,gBAAgB,CAAS;IAClC,2DAA2D;IAClD,iBAAiB,CAAS;IAEnC,YAAY,OAOX;QACA,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC1F,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QAClC,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS;YAAE,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAA;QAC5F,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS;YAAE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAA;IAChG,CAAC;CACD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,0EAA0E;AAC1E,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,2EAA2E;AAC3E,qBAAqB;AACrB,MAAM,CAAC,MAAM,sBAAsB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACtE,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,0BAA0B;CAC1B,CAAC,CAAA;AAEF;;;;GAIG;AACH,SAAS,cAAc,CACtB,UAAsD;IAEtD,OAAO,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAA;AAC3D,CAAC;AAoBD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CACrC,KAAuC,EACvC,SAAiB,EACjB,QAAkC;IAElC,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;IAC3D,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,SAAS,CAAA;IAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;IAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IACtF,yEAAyE;IACzE,qEAAqE;IACrE,sEAAsE;IACtE,MAAM,KAAK,GACV,MAAM,KAAK,iBAAiB;QAC5B,QAAQ,KAAK,SAAS;QACtB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,MAAM,GAAG,CAAC;QAClD,CAAC,CAAC,IAAI,gCAAgC,CACpC,QAAQ,CAAC,kBAAkB,EAC3B,SAAS,EACT,QAAQ,CAAC,SAAS,EAClB,MAAM,EACN,SAAS,CAAC,OAAO,IAAI,sCAAsC,EAC3D,QAAQ,CAAC,OAAO,CAChB;QACF,CAAC,CAAC,SAAS,CAAA;IACb,OAAO,IAAI,sBAAsB,CAAC;QACjC,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,KAAK;QAChB,gBAAgB,EAAE,MAAM;QACxB,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,iEAAiE,SAAS,gBAAgB,MAAM,GACxG,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAC9D,iFACC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAC7C,EAAE;KACF,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,aAAa,CAAA;AAExC,MAAM,UAAU,uBAAuB,CAAC,GAAY,EAAE,cAAsB;IAC3E,IAAI,GAAG,YAAY,yBAAyB;QAAE,OAAO,cAAc,CAAA;IACnE,IAAI,CAAC,CAAC,GAAG,YAAY,kBAAkB,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1D,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,cAAc,CAAA;IACtD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IACzB,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC1C,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,wEAAwE;IACxE,oCAAoC;IACpC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,IAAI,cAAc,CAAA;QAChD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,kBAAkB,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,0BAA0B,GAAG,KAAK,CAAA;AAExC;;;;;;;GAOG;AACH,MAAM,0BAA0B,GAAsB;IACrD,cAAc;IACd,kBAAkB;IAClB,mBAAmB;IACnB,qBAAqB;CACrB,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,kBAAkB,CAChC,MAAwB,EACxB,SAAiB,EACjB,OAAe,EACf,YAAqC;IAErC,IAAI,GAA4B,CAAA;IAChC,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CACrC,0BAA0B,EAC1B,8BAA8B,EAC9B,YAAY,CACZ,CAAA;QACD,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACnC,MAAM,CAAC,OAAO,CAAc,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAClF,CAAA;IACF,CAAC;IAAC,MAAM,CAAC;QACR,iEAAiE;QACjE,mEAAmE;QACnE,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAA;IACjF,IAAI,SAAS,EAAE,MAAM,KAAK,OAAO,IAAI,SAAS,CAAC,MAAM,KAAK,eAAe;QAAE,OAAO,UAAU,CAAA;IAC5F,KAAK,MAAM,SAAS,IAAI,GAAG,EAAE,MAAM,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAA;QAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,YAAY,CAAA;IAC7F,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACrC,GAAY,EACZ,YAAmD;IAEnD,IAAI,GAAG,YAAY,sBAAsB;QAAE,OAAO,GAAG,CAAA;IACrD,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;QAC9C,OAAO,IAAI,sBAAsB,CAAC;YACjC,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,uFAAuF,GAAG,CAAC,OAAO,EAAE;YAC7G,KAAK,EAAE,GAAG;SACV,CAAC,CAAA;IACH,CAAC;IACD,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;QAC9C,OAAO,IAAI,sBAAsB,CAAC;YACjC,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,gGAAgG,GAAG,CAAC,OAAO,0GAA0G;YAC9N,KAAK,EAAE,GAAG;SACV,CAAC,CAAA;IACH,CAAC;IACD,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;QACvC,sEAAsE;QACtE,oEAAoE;QACpE,8DAA8D;QAC9D,8DAA8D;QAC9D,IAAI,uBAAuB,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACnE,OAAO,IAAI,sBAAsB,CAAC;YACjC,MAAM,EAAE,iBAAiB;YACzB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,mFAAmF,GAAG,CAAC,OAAO,EAAE;YACzG,KAAK,EAAE,GAAG;SACV,CAAC,CAAA;IACH,CAAC;IACD,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;QACzC,oEAAoE;QACpE,oEAAoE;QACpE,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,iEAAiE;QACjE,oEAAoE;QACpE,4DAA4D;QAC5D,oEAAoE;QACpE,uEAAuE;QACvE,qEAAqE;QACrE,kDAAkD;QAClD,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,IAAI,sBAAsB,CAAC;gBACjC,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,sIAAsI,GAAG,CAAC,OAAO,EAAE;gBAC5J,KAAK,EAAE,GAAG;aACV,CAAC,CAAA;QACH,CAAC;QACD,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;YACnC,OAAO,IAAI,sBAAsB,CAAC;gBACjC,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,wFAAwF,GAAG,CAAC,OAAO,EAAE;gBAC9G,KAAK,EAAE,GAAG;aACV,CAAC,CAAA;QACH,CAAC;QACD,oEAAoE;QACpE,gEAAgE;QAChE,oEAAoE;QACpE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;QAC/D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,IAAI,sBAAsB,CAAC;gBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,KAAK,EAAE,GAAG;aACV,CAAC,CAAA;QACH,CAAC;QACD,OAAO,IAAI,sBAAsB,CAAC;YACjC,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,KAAK,EAAE,GAAG;SACV,CAAC,CAAA;IACH,CAAC;IACD,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;QAC7C,OAAO,IAAI,sBAAsB,CAAC;YACjC,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,yDAAyD,GAAG,CAAC,OAAO,EAAE;YAC/E,KAAK,EAAE,GAAG;SACV,CAAC,CAAA;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,MAAwB,EACxB,MAAuC,EACvC,OAA8B,EAC9B,SAA0E,EAC1E,gBAA6C,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,EACjF,iBAAuD,mBAAmB,CACzE,MAAM,EACN,MAAM,EACN,MAAM,CAAC,mBAAmB,CAC1B;IAED,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC1B,8BAA8B,CAAC,MAAM,CAAC,CAAA;IAEtC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IAClC,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,IAAI,yBAAyB,CAAA;IACtE,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,UAAU,GAAG,cAAc,iBAAiB,EAAE,EAAE,CAAA;IACtD,MAAM,SAAS,GACd,MAAM,CAAC,YAAY,KAAK,SAAS;QAChC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC;QAClC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAEtC,MAAM,OAAO,GAAG,KAAK,EAAE,MAAoB,EAAiB,EAAE;QAC7D,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,gEAAgE;YAChE,IAAI,CAAC,CAAC,GAAG,YAAY,0BAA0B,CAAC;gBAAE,MAAM,GAAG,CAAA;QAC5D,CAAC;IACF,CAAC,CAAA;IAED,uEAAuE;IACvE,oEAAoE;IACpE,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,8DAA8D;IAC9D,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,KAAK,GAAG,KAAK,EAAE,gBAAwB,EAAE,MAAoB,EAAiB,EAAE;QACrF,MAAM,KAAK,GACV,MAAM,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,EAAE,EAAE;YAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,EAAE,CAAA;QAChD,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IACxD,CAAC,CAAA;IAED,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CACrC,SAAS,CAAC,SAAS,EACnB,sBAAsB,EACtB,OAAO,CAAC,MAAM,CACd,CAAA;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,mDAAmD;IACnD,MAAM,UAAU,GACf,MAAM,CAAC,YAAY,KAAK,SAAS;QAChC,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC;QAChC,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAA;IACpC,wEAAwE;IACxE,wEAAwE;IACxE,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,sCAAsC;IACtC,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,iDAAiD;IACjD,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAClE,MAAM,SAAS,GAAG,0BAA0B,CAC3C,MAAM,CAAC,MAAM,EACb,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CACnF,CAAA;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACjD,uEAAuE;IACvE,2DAA2D;IAC3D,yEAAyE;IACzE,gEAAgE;IAChE,IAAI,QAA4B,CAAA;IAChC,MAAM,eAAe,GAAG,KAAK,IAAsC,EAAE;QACpE,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,cAAc,CAAC;gBACrB,SAAS;gBACT,IAAI,EAAE,UAAU;gBAChB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,YAAY;gBACZ,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,SAAS;aACT,CAAC,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC9C,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAC1E,CAAA;QACD,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,iEAAiE;QACjE,mDAAmD;QACnD,MAAM,eAAe,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;QACzF,MAAM,aAAa,GAAG,qBAAqB,UAAU,iBAAiB,SAAS,EAAE,CAAA;QACjF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,eAAe,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAA;QACtF,CAAC;QACD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7B,cAAc,CAAC,WAAW,CAAC,eAAe,EAAE,aAAa,EAAE,MAAM,CAAC,CAClE,CAAA;QACF,CAAC;QACD,OAAO,gBAAgB,CAAC;YACvB,SAAS;YACT,IAAI,EAAE,UAAU;YAChB,QAAQ;YACR,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,YAAY;YACZ,SAAS;YACT,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;SACN,CAAC,CAAA;IACH,CAAC,CAAA;IAED,IAAI,UAAmC,CAAA;IACvC,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,oEAAoE;QACpE,uEAAuE;QACvE,8DAA8D;QAC9D,YAAY;QACZ,MAAM,sBAAsB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,GAAG,CAAA;IACpD,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,kBAAkB,GACrB,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IAC3D,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,aAAa,GAA2B;QAC7C,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,SAAS,CAAC,cAAc,CAAC;KAC9E,CAAA;IAED,IAAI,CAAC;QACJ,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7C,MAAM,CAAC,OAAO,CACb,MAAM,EACN,UAAU,EACV,UAAU,EACV,MAAM,CACN,CACD,CAAA;QACD,QAAQ,KAAK,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAA;QACnC,MAAM,OAAO,GACZ,MAAM,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,MAAM,cAAc,CACpB,KAAK,EAAE,MAAM,EAAE,EAAE;gBAChB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CACjC,KAAK,EACL,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC,EAChC,SAAS,EACT,MAAM,CACN,CAAA;gBACD,kBAAkB,GAAG,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,kBAAkB,CAAA;gBACvE,QAAQ,KAAK,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAA;gBACjC,uDAAuD;gBACvD,wDAAwD;gBACxD,6CAA6C;gBAC7C,gDAAgD;gBAChD,sDAAsD;gBACtD,uDAAuD;gBACvD,qDAAqD;gBACrD,OAAO,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE;oBAC1C,SAAS;oBACT,kBAAkB,EAAE,SAAS;oBAC7B,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7C,CAAC,CAAA;YACH,CAAC,EACD,QAAQ,EACR,SAAS,EACT,SAAS,UAAU,EAAE,EACrB,aAAa,CACb;YACF,CAAC,CAAC,MAAM,cAAc,CACpB,KAAK,EAAE,MAAM,EAAE,EAAE;gBAChB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CACnC,KAAK,EACL,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,EAClC,SAAS,EACT,MAAM,CACN,CAAA;gBACD,QAAQ,KAAK,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAA;gBACnC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAA;YACnC,CAAC,EACD,QAAQ,EACR,SAAS,EACT,WAAW,UAAU,EAAE,EACvB,aAAa,CACb,CAAA;QAEJ,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAA;QACxD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,IAAI,SAAS,CAAA;QAC7C,mEAAmE;QACnE,uEAAuE;QACvE,+DAA+D;QAC/D,0DAA0D;QAC1D,MAAM,GAAG,GAAG,MAAM,gBAAgB,CACjC,MAAM,EACN,SAAS,EACT,OAAO,EACP,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,SAAS,CACT,CAAA;QACD,mEAAmE;QACnE,uEAAuE;QACvE,mEAAmE;QACnE,iEAAiE;QACjE,oEAAoE;QACpE,iEAAiE;QACjE,iEAAiE;QACjE,gCAAgC,CAC/B,GAAG,EACH,SAAS,EACT,WAAW,OAAO,CAAC,IAAI,iBAAiB,SAAS,EAAE,CACnD,CAAA;QACD,qEAAqE;QACrE,kEAAkE;QAClE,+DAA+D;QAC/D,kEAAkE;QAClE,uCAAuC;QACvC,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,YAAY,GAAG,4BAA4B,OAAO,CAAC,IAAI,iBAAiB,SAAS,EAAE,CAAA;YACzF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;YACtF,CAAC;YACD,mEAAmE;YACnE,gEAAgE;YAChE,oEAAoE;YACpE,mDAAmD;YACnD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7B,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,CAClE,CAAA;YACF,CAAC;QACF,CAAC;QACD,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,yCAAyC;QACzC,MAAM,KAAK,GACV,kBAAkB,KAAK,SAAS;YAC/B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACA,IAAI,EAAE,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAEzD;gBACZ,IAAI,EAAE,UAAU;gBAChB,GAAG,EAAE,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;aACpD,CAAA;QACJ,OAAO;YACN,OAAO;YACP,KAAK,EAAE,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE;gBACvD,IAAI;gBACJ,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CAAC;YACF,0DAA0D;YAC1D,GAAG,CAAC,IAAI,KAAK,QAAQ;gBACpB,CAAC,CAAC,EAAE,YAAY,EAAE,wBAAwB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;gBACzF,CAAC,CAAC,EAAE,CAAC;YACN,SAAS;YACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,UAAU;YACV,OAAO;YACP,KAAK;SACL,CAAA;IACF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,YAAY,GACjB,GAAG,YAAY,oBAAoB,IAAI,kBAAkB,KAAK,SAAS;YACtE,CAAC,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC;YACjF,CAAC,CAAC,SAAS,CAAA;QACb,qEAAqE;QACrE,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;QACtB,CAAC,CAAC,CAAA;QACF,MAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,GAAG,CAAA;IACvD,CAAC;AACF,CAAC;AAwCD,SAAS,cAAc,CAAC,OAAyB;IAChD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IACrC,OAAO;QACN,UAAU,EAAE,GAAG,4BAA4B,IAAI,mBAAmB,EAAE;QACpE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE;YACT,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E;QACD,IAAI,EAAE;YACL,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE;YAC3C,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;gBAC/D,CAAC,CAAC,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACN,SAAS,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE;SAC3E;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,gCAAgC,CACxC,GAAuB,EACvB,SAA2C,EAC3C,OAAe;IAEf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK;YAAE,SAAQ;QACzC,MAAM,IAAI,kCAAkC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IACxF,CAAC;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,cAAc,CAAC,GAAuB,EAAE,UAAkB,EAAE,SAAiB;IACrF,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,GAAG,CAAA;IAC/C,MAAM,IAAI,8BAA8B,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;AAChE,CAAC;AAeD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,MAAuC,EACvC,OAA8C;IAE9C,IAAI,OAAO,CAAC,aAAa,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACd,uQAAuQ,CACvQ,CAAA;IACF,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IAClC,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IAClF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAChC,KAAK,EACL,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,EAC/C,SAAS,EACT,OAAO,CAAC,MAAM,CACd,CAAA;IACD,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;SAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;SACpC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,CAAC,CAAA;IAC3E,sEAAsE;IACtE,sEAAsE;IACtE,gEAAgE;IAChE,yEAAyE;IACzE,qEAAqE;IACrE,wCAAwC;IACxC,MAAM,OAAO,CAAC,GAAG,CAChB,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QACtF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,CAAC,GAAG,YAAY,0BAA0B,CAAC;gBAAE,MAAM,GAAG,CAAA;QAC5D,CAAC;IACF,CAAC,CAAC,CACF,CAAA;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAA;AACxC,CAAC;AAsBD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,MAAuC,EACvC,OAA2C;IAE3C,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;IACjC,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACd,mKAAmK,CACnK,CAAA;IACF,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IAClC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAA;IACxC,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IAClF,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,MAAM,CAAC,OAAO,CACb,KAAK,EACL,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,EACrC,SAAS,EACT,OAAO,EAAE,MAAM,CACf;QACD,MAAM,CAAC,OAAO,CACb,KAAK,EACL,mBAAmB,CAAC,SAAS,CAAC,EAC9B,SAAS,EACT,OAAO,EAAE,MAAM,CACf;QACD,MAAM,CAAC,OAAO,CACb,KAAK,EACL,iBAAiB,CAAC,SAAS,CAAC,EAC5B,SAAS,EACT,OAAO,EAAE,MAAM,CACf;KACD,CAAC,CAAA;IACF,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAChD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,KAAK,YAAY,CACzD,CAAC,MAAM,CAAA;IACR,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,CAAA;IAC/F,OAAO;QACN,QAAQ,EAAE;YACT,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,IAAI,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,IAAI,CAAC;SAClC;QACD,YAAY;QACZ,WAAW;KACX,CAAA;AACF,CAAC;AAmDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC3D,OAAO;QACN,UAAU,EAAE,GAAG,iBAAiB,IAAI,mBAAmB,EAAE;QACzD,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACT,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClF;QACD,IAAI,EAAE;YACL,aAAa,EAAE,SAAS;YACxB,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE;gBAClE,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS;gBACtD,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,EAAE;gBACjE,CAAC,CAAC,EAAE,CAAC;YACN,WAAW,EAAE,kBAAkB,CAC9B,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,SAAS,CACjB;SACD;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,kBAAkB,CACjC,QAA6B,EAC7B,mBAA2B,EAC3B,gBAAyB,EACzB,SAA4C;IAE5C,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAA;IACxC,MAAM,IAAI,GACT,gBAAgB,KAAK,SAAS;QAC7B,CAAC,CAAC,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,gBAAgB,EAAE;QAC3C,CAAC,CAAC,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,CAAA;IAC3B,OAAO;QACN,GAAG,WAAW;QACd,QAAQ,EAAE;YACT,GAAG,WAAW,CAAC,QAAQ;YACvB,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,SAAS,CAAC;SAClE;QACD,IAAI;KACJ,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gBAAgB,CAC/B,QAA6B,EAC7B,mBAA2B,EAC3B,KAAwC;IAExC,OAAO;QACN,GAAG,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM;QACxC,GAAG,oBAAoB,CAAC,mBAAmB,CAAC;QAC5C,GAAG,KAAK;KACR,CAAA;AACF,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAwB,EACxB,SAAiB,EACjB,mBAA2B,EAC3B,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CACpC,KAAK,EACL,mBAAmB,CAAC,SAAS,EAAE,mBAAmB,CAAC,EACnD,SAAS,EACT,MAAM,CACN,CAAA;IACD,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAA;IAC/C,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CACd,+BAA+B,mBAAmB,iBAAiB,SAAS,mKAAmK,CAC/O,CAAA;IACF,CAAC;IACD,MAAM,oBAAoB,GAAG,QAAQ,EAAE,IAAI,EAAE,oBAAoB,CAAA;IACjE,OAAO;QACN,WAAW;QACX,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CAClC,OAAiC,EACjC,SAAiB,EACjB,KAAa,EACb,UAII,EAAE;IAEN,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;QAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACd,uBAAuB,OAAO,CAAC,IAAI,0iBAA0iB,CAC7kB,CAAA;QACF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;IACvD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACd,uBAAuB,OAAO,CAAC,IAAI,kKAAkK,CACrM,CAAA;IACF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;AACrD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CACxB,KAAuC,EACvC,SAAiB,EACjB,QAAkC;IAElC,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACpE,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,SAAS,CAAA;IAC5C,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,CAAC;QAAE,OAAO,SAAS,CAAA;IAClF,MAAM,KAAK,GAAG,KAAK,EAAE,MAAM,EAAE,OAAO,CAAA;IACpC,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACd,4BAA4B,SAAS,8FAA8F,CACnI,CAAA;IACF,CAAC;IACD,OAAO;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAA;AACF,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CACjC,OAAoC;IAEpC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,CAAC;QAAE,OAAO,SAAS,CAAA;IACpF,MAAM,IAAI,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAA;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAA;IAC9B,OAAO;QACN,IAAI;QACJ,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,MAAM,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAA;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC5B,IAAI,GAAG,sBAAsB,CAAA;CAC/C;AAuBD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,IAA4E,EAC5E,QAA2B,EAC3B,SAA0E,EAC1E,KAAa,EACb,YAAoC,EAAE;IAEtC;;;;;;;;OAQG;IACH,IAAI,WAAoB,CAAA;IACxB,OAAO,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;QACnC,0EAA0E;QAC1E,IAAI,WAAW,GAAG,SAAS,CAAC,cAAc,CAAA;QAC1C,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACxC,WAAW,GAAG,SAAS,CAAA;YACvB,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAA;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,wBAAwB;gBAAE,MAAK;YAClD,MAAM,YAAY,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAA;YACnD,IAAI,YAAY,KAAK,SAAS;gBAAE,MAAM,GAAG,CAAA;YACzC,WAAW,GAAG,GAAG,CAAA;YACjB,WAAW,GAAG,YAAY,CAAA;QAC3B,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,wBAAwB;gBAAE,MAAK;YAClD,MAAM,GAAG,CAAA;QACV,CAAC;IACF,CAAC;IACD,MAAM,IAAI,oBAAoB,CAC7B,eAAe,KAAK,wBAAwB,SAAS,CAAC,SAAS,MAC9D,WAAW,KAAK,SAAS;QACxB,CAAC,CAAC,0DACA,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CACxE,EAAE;QACH,CAAC,CAAC,EACJ,EAAE,EACF,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAA;AACF,CAAC;AAiCD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,MAAwB,EACxB,SAAiB,EACjB,OAAiC,EACjC,MAAoB;IAEpB,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAC/B,KAAK,EACL,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,EAChC,SAAS,EACT,MAAM,CACN,CAAA;QACD,MAAM,GAAG,GAAG,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAA;QAC9B,sEAAsE;QACtE,4DAA4D;QAC5D,qEAAqE;QACrE,gEAAgE;QAChE,0CAA0C;QAC1C,IAAI,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,CAAC,GAAG,YAAY,0BAA0B,CAAC;YAAE,MAAM,GAAG,CAAA;IAC5D,CAAC;IAED,MAAM,QAAQ,GACb,OAAO,CAAC,WAAW,IAAI,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IACvF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAChC,KAAK,EACL,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,EAChC,SAAS,EACT,MAAM,CACN,CAAA;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAA;YAC7B,IAAI,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACrD,CAAC;IACF,CAAC;IACD,MAAM,IAAI,KAAK,CACd,oDAAoD,OAAO,CAAC,IAAI,iBAAiB,SAAS,+QAA+Q,CACzW,CAAA;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,GAAgB;IAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAA;IACnC,OAAO;QACN,GAAG;QACH,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3C,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,MAAwB,EACxB,SAAiB,EACjB,OAAiC,EACjC,QAA2B,EAC3B,SAA8C,EAC9C,IAAgC,EAChC,cAAiD;IAEjD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAA;IACrD,MAAM,OAAO,GAAG,CAAC,GAAuB,EAAW,EAAE,CACpD,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAA;IAE7D,IAAI,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1F,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC;YACJ,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YAC9C,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,6DAA6D;YAC7D,4DAA4D;YAC5D,qEAAqE;YACrE,oCAAoC;YACpC,IAAI,GAAG,YAAY,wBAAwB;gBAAE,MAAK;YAClD,MAAM,GAAG,CAAA;QACV,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACvC,MAAwB,EACxB,SAAiB,EACjB,OAAiC,EACjC,SAAiB,EACjB,IAAgC;IAEhC,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAClE,OAAO,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE;YACvD,IAAI;YACJ,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC,CAAA;IACH,CAAC,CAAA;AACF,CAAC;AAED,KAAK,UAAU,mBAAmB,CACjC,MAAwB,EACxB,SAAiB,EACjB,OAAiC,EACjC,MAAoB;IAEpB,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CACnC,KAAK,EACL,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,EACpC,SAAS,EACT,MAAM,CACN,CAAA;QACD,OAAO,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,YAAY,0BAA0B;YAAE,OAAO,SAAS,CAAA;QAC/D,MAAM,GAAG,CAAA;IACV,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,KAAK,UAAU,kBAAkB,CAChC,WAAkC,EAClC,MAAuC,EACvC,OAA8B,EAC9B,cAAsB;AACtB;;;;GAIG;AACH,gBAAkE;IAElE,MAAM,OAAO,GAAG,sBAAsB,CAAC;QACtC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI;QAC9B,OAAO,EAAE,OAAO,CAAC,gBAAgB;QACjC,SAAS,EAAE,IAAI,wBAAwB,CAAC,WAAW,CAAC,KAAK,EAAE;YAC1D,6DAA6D;YAC7D,uDAAuD;YACvD,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC,iBAAiB,CAAC;YAC/D,GAAG,CAAC,WAAW,CAAC,YAAY,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,YAAY,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;SACN,CAAC;QACF,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,GAAG,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,mBAAmB,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAA;IACF,IAAI,CAAC;QACJ,MAAM,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAChG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;QACF,MAAM,GAAG,CAAA;IACV,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,OAAgB,EAChB,WAAmB,EACnB,cAAsB,EACtB,MAAoB;IAEpB,yEAAyE;IACzE,mEAAmE;IACnE,oEAAoE;IACpE,MAAM,UAAU,GAAG,8BAA8B,WAAW,EAAE,CAAA;IAC9D,IAAI,CAAC;QACJ,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,oEAAoE;QACpE,oEAAoE;QACpE,sEAAsE;QACtE,oDAAoD;QACpD,MAAM,IAAI,iBAAiB,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,GAAG,CAClE,KAAK,EAAE,UAAU,EAAE,EAAE,CACpB,MAAM,iBAAiB,CACtB,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAClF,WAAW,CACX,CACF,CAAA;QACD,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,yDAAyD;QACzD,MAAM,EAAE,cAAc,EAAE,CAAA;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,sEAAsE;QACtE,6DAA6D;QAC7D,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,qEAAqE;QACrE,sEAAsE;QACtE,gEAAgE;QAChE,IAAI,GAAG,YAAY,wBAAwB,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACzE,MAAM,sBAAsB,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,CAAC,CAAA;QAC/D,CAAC;QACD,MAAM,GAAG,CAAA;IACV,CAAC;AACF,CAAC"}
|
|
@@ -0,0 +1,375 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Ingress verification: refuse a sandbox whose agent port no applied policy
|
|
3
|
+
* closes.
|
|
4
|
+
*
|
|
5
|
+
* Sibling of `egress-policy.ts`, and deliberately shaped like its
|
|
6
|
+
* `verifyEgressPolicyApplied` half rather than its translation half — this
|
|
7
|
+
* module NEVER computes a manifest and never creates an object. Operators
|
|
8
|
+
* apply the boundary; this backend reads what the cluster actually holds and
|
|
9
|
+
* refuses when the boundary is not there. That is the same rule the egress
|
|
10
|
+
* path documents, for the same reason: the network boundary should be
|
|
11
|
+
* reviewed by whoever has cluster-admin, not written by whatever created the
|
|
12
|
+
* ServiceAccount token this backend runs with.
|
|
13
|
+
*
|
|
14
|
+
* ## Why this exists at all
|
|
15
|
+
*
|
|
16
|
+
* Two shipped comments call the ingress policy the boundary on the agent
|
|
17
|
+
* port — `workspace.ts`'s create path ("the NetworkPolicy rather than the
|
|
18
|
+
* bind token is the boundary on its agent port") and the guest agent's own
|
|
19
|
+
* source ("the network rule in front of the port is the boundary") — and
|
|
20
|
+
* until this module nothing checked one existed. The gap was not theoretical:
|
|
21
|
+
* measured on a managed cluster, sandbox pods this backend POSTed had
|
|
22
|
+
* enforcement on egress only, their agent port answered from every source
|
|
23
|
+
* tried (another namespace, another node, a host-network pod), and no request
|
|
24
|
+
* anywhere in the backend would have noticed.
|
|
25
|
+
*
|
|
26
|
+
* The reason it read as covered is worth keeping written down, because the
|
|
27
|
+
* manifests still carry the shape that produced it. A `SandboxTemplate`'s
|
|
28
|
+
* inline `networkPolicy` block is translated by the agent-sandbox controller
|
|
29
|
+
* into a policy selecting `agents.x-k8s.io/sandbox-template-ref-hash` — a
|
|
30
|
+
* label written only onto a Sandbox ADOPTED out of a `SandboxWarmPool`, never
|
|
31
|
+
* onto one this backend POSTs (see `objects.ts`'s
|
|
32
|
+
* {@link SANDBOX_TEMPLATE_LABEL_KEY} comment). Every workspace, and every
|
|
33
|
+
* pool-less task sandbox, is POSTed. So the policy that looked like coverage
|
|
34
|
+
* selected none of them, and the standalone manifest that DOES select them
|
|
35
|
+
* (`k8s/manifests/networkpolicy.yaml`, whose `podSelector` matches
|
|
36
|
+
* {@link SANDBOX_TEMPLATE_LABEL_KEY} by existence) was verified by nothing —
|
|
37
|
+
* an operator who skipped that one file got a silently open port.
|
|
38
|
+
*
|
|
39
|
+
* ## The decision, in one paragraph
|
|
40
|
+
*
|
|
41
|
+
* Policies UNION. Kubernetes admits a connection if ANY policy selecting the
|
|
42
|
+
* pod allows it, and a pod selected by no ingress-enforcing policy at all is
|
|
43
|
+
* allowed everything. So two things have to hold, not one: at least one
|
|
44
|
+
* policy that enforces ingress must select the pod, AND no policy selecting
|
|
45
|
+
* the pod may admit a wide-open peer on the agent port. One open rule opens
|
|
46
|
+
* the port however many closed ones sit beside it — that is the resource's
|
|
47
|
+
* semantics, not a heuristic this module chose.
|
|
48
|
+
*
|
|
49
|
+
* ## What it reads, and what it cannot see
|
|
50
|
+
*
|
|
51
|
+
* It LISTS the namespace's policies and evaluates their selectors against the
|
|
52
|
+
* pod's real labels. It never GETs a policy by name: an object with the right
|
|
53
|
+
* name proves the object exists, not that it selects this pod — a selector
|
|
54
|
+
* with a stale template value would pass a name check and cover nothing.
|
|
55
|
+
*
|
|
56
|
+
* Before the POST the only labels that exist are the ones the create body
|
|
57
|
+
* stamps; the agent-sandbox controller writes more of its own onto the object
|
|
58
|
+
* afterwards. For COVERAGE that is fail-closed — a policy selecting a
|
|
59
|
+
* controller-written label does not count, so the create is refused rather
|
|
60
|
+
* than admitted. For an OPENING it is not: a wide-open rule whose selector
|
|
61
|
+
* keys on such a label reads as not selecting this pod. The claim path has no
|
|
62
|
+
* such gap, because there the pod already exists and its own labels are read.
|
|
63
|
+
*
|
|
64
|
+
* What a namespaced Role cannot read is the honest limit, and it is a
|
|
65
|
+
* CONFIGURATION rather than a defect: a cluster-scoped policy (the clusterwide
|
|
66
|
+
* arm of the Cilium CRD is a different, cluster-scoped kind), a service mesh's
|
|
67
|
+
* own authorization layer, or a cloud-level security group can all close the
|
|
68
|
+
* port somewhere this check cannot look. Such a deployment sets
|
|
69
|
+
* `ingress: 'unverified'`, which reads no policy and issues no request. That
|
|
70
|
+
* is a supported configuration with a name, not a smell — what is NOT
|
|
71
|
+
* supported is a deployment that believes it is covered because nothing said
|
|
72
|
+
* otherwise.
|
|
73
|
+
*
|
|
74
|
+
* ## Why the refusal is on by default
|
|
75
|
+
*
|
|
76
|
+
* The operator who needs this check is precisely the one who does not know
|
|
77
|
+
* the port is open. An opt-in check would be read by the deployments that
|
|
78
|
+
* already closed the port and skipped by the ones that did not. Failing
|
|
79
|
+
* closed with a named opt-out is how the egress path already behaves — it
|
|
80
|
+
* refuses rather than degrades — and it is the only arrangement under which
|
|
81
|
+
* the measurement above turns into an error message instead of a quiet
|
|
82
|
+
* success.
|
|
83
|
+
*/
|
|
84
|
+
import { type KubernetesClient } from './k8s-client.js';
|
|
85
|
+
/**
|
|
86
|
+
* Which policy resources the check enumerates.
|
|
87
|
+
*
|
|
88
|
+
* - `'core'` (the default) lists `NetworkPolicy` — every cluster serves it,
|
|
89
|
+
* and a cluster running a CNI with its own CRD still enforces plain
|
|
90
|
+
* `NetworkPolicy` objects too, so this is never the wrong list, only
|
|
91
|
+
* sometimes an incomplete one.
|
|
92
|
+
* - `'cilium'` lists `CiliumNetworkPolicy` AS WELL — not instead. A cluster
|
|
93
|
+
* running that CNI typically carries both kinds, and an open rule in
|
|
94
|
+
* either one opens the port.
|
|
95
|
+
*/
|
|
96
|
+
export type KubernetesIngressEngine = 'core' | 'cilium';
|
|
97
|
+
/**
|
|
98
|
+
* The config-level ingress hook on `KubernetesBackendConfig`.
|
|
99
|
+
*
|
|
100
|
+
* `undefined` means VERIFY with the default engine — this is the one config
|
|
101
|
+
* field in this backend whose absent value is the strict one, because the
|
|
102
|
+
* deployments that need the check are the ones that would never have set it.
|
|
103
|
+
* `'unverified'` is the explicit opt-out for a deployment whose boundary
|
|
104
|
+
* lives somewhere a namespaced Role cannot read; it issues no request at all.
|
|
105
|
+
*/
|
|
106
|
+
export type KubernetesIngressConfig = {
|
|
107
|
+
/** Defaults to `config.egress?.engine ?? 'core'`. See the type doc. */
|
|
108
|
+
readonly engine?: KubernetesIngressEngine;
|
|
109
|
+
} | 'unverified';
|
|
110
|
+
/** `true` when `ingress` is anything other than the `'unverified'` opt-out. */
|
|
111
|
+
export declare function ingressVerificationEnabled(ingress: KubernetesIngressConfig | undefined): boolean;
|
|
112
|
+
/**
|
|
113
|
+
* Which resources to enumerate, given both policy-shaped config fields.
|
|
114
|
+
*
|
|
115
|
+
* The default deliberately follows `config.egress.engine`: a deployment that
|
|
116
|
+
* already told this backend which policy engine its cluster runs should not
|
|
117
|
+
* have to say it twice, and the far more likely mistake is declaring it once
|
|
118
|
+
* and having the ingress check quietly read the wrong CRD.
|
|
119
|
+
*/
|
|
120
|
+
export declare function resolveIngressEngine(ingress: KubernetesIngressConfig | undefined, egressEngine: KubernetesIngressEngine | undefined): KubernetesIngressEngine;
|
|
121
|
+
/** The pod the check is about, and the port that has to be closed on it. */
|
|
122
|
+
export interface IngressVerificationTarget {
|
|
123
|
+
readonly namespace: string;
|
|
124
|
+
/**
|
|
125
|
+
* The pod's REAL labels — for a directly created Sandbox the labels the
|
|
126
|
+
* create body stamps (known before the POST, so a refusal leaves no
|
|
127
|
+
* Sandbox and no PVC behind), for a claimed one the bound pod's own
|
|
128
|
+
* `metadata.labels`. Never a policy name: a name proves an object exists,
|
|
129
|
+
* a label is what a selector actually matches.
|
|
130
|
+
*/
|
|
131
|
+
readonly podLabels: Readonly<Record<string, string>>;
|
|
132
|
+
readonly agentPort: number;
|
|
133
|
+
readonly engine: KubernetesIngressEngine;
|
|
134
|
+
/** How the refusal names the thing being created, e.g. `Sandbox namzu-ws-demo`. */
|
|
135
|
+
readonly subject: string;
|
|
136
|
+
}
|
|
137
|
+
/** What one examined policy turned out to be. One line of the refusal. */
|
|
138
|
+
export type IngressPolicyVerdict =
|
|
139
|
+
/** Selects the pod, enforces ingress, admits nothing wide open on the port. */
|
|
140
|
+
'covers'
|
|
141
|
+
/** Selects the pod and admits a wide-open peer on the agent port. */
|
|
142
|
+
| 'opens-agent-port'
|
|
143
|
+
/** Its selector does not match the pod's labels. */
|
|
144
|
+
| 'does-not-select'
|
|
145
|
+
/** Selects the pod but does not enforce ingress, so it neither covers nor opens. */
|
|
146
|
+
| 'not-ingress-scoped'
|
|
147
|
+
/** Contains something this check cannot decide — see {@link IngressPolicyRefusal}. */
|
|
148
|
+
| 'not-evaluable';
|
|
149
|
+
/** One policy, as the refusal reports it. */
|
|
150
|
+
export interface ExaminedIngressPolicy {
|
|
151
|
+
readonly kind: 'NetworkPolicy' | 'CiliumNetworkPolicy';
|
|
152
|
+
readonly name: string;
|
|
153
|
+
readonly verdict: IngressPolicyVerdict;
|
|
154
|
+
/** Why, for every verdict that is not a plain match or non-match. */
|
|
155
|
+
readonly detail?: string;
|
|
156
|
+
}
|
|
157
|
+
/**
|
|
158
|
+
* Which of the three refusals this is. They are three different operator
|
|
159
|
+
* actions, which is why the error carries them apart rather than folding
|
|
160
|
+
* them into one message:
|
|
161
|
+
*
|
|
162
|
+
* - `no-covering-policy` — apply the missing policy.
|
|
163
|
+
* - `port-open` — fix or delete the policy that is standing the door open.
|
|
164
|
+
* - `not-evaluable` — this check cannot decide; grant the missing verb, or
|
|
165
|
+
* declare `ingress: 'unverified'` because the boundary is somewhere it
|
|
166
|
+
* cannot look.
|
|
167
|
+
*/
|
|
168
|
+
export type IngressPolicyRefusal = 'no-covering-policy' | 'port-open' | 'not-evaluable';
|
|
169
|
+
/**
|
|
170
|
+
* A policy collection a check could NOT read, and why.
|
|
171
|
+
*
|
|
172
|
+
* It exists because an empty `examined` list means two different things and
|
|
173
|
+
* nothing else tells them apart: the namespace holds no policy of the kinds
|
|
174
|
+
* read, which is a fact about the CLUSTER, or no list was read at all, which
|
|
175
|
+
* is a fact about this CHECK. Reporting the first when the second happened is
|
|
176
|
+
* the defect this whole module exists to delete, one layer down.
|
|
177
|
+
*
|
|
178
|
+
* Shared with the EGRESS direction — `egress-policy.ts`'s union check reads
|
|
179
|
+
* the same two collections through the same {@link listPolicies} and reports
|
|
180
|
+
* the same failure the same way. See "Shared with the egress direction".
|
|
181
|
+
*/
|
|
182
|
+
export interface UnreadPolicySource {
|
|
183
|
+
readonly resource: 'networkpolicies' | 'ciliumnetworkpolicies';
|
|
184
|
+
readonly path: string;
|
|
185
|
+
/**
|
|
186
|
+
* - `'absent'` — the API server served no such collection here.
|
|
187
|
+
* - `'forbidden'` — it refused the read.
|
|
188
|
+
*
|
|
189
|
+
* They are different operator actions, which is why the remedy sentence
|
|
190
|
+
* branches on this rather than on the message.
|
|
191
|
+
*/
|
|
192
|
+
readonly why: 'absent' | 'forbidden';
|
|
193
|
+
/** The failure in its own terms, for the reader of the message. */
|
|
194
|
+
readonly reason: string;
|
|
195
|
+
}
|
|
196
|
+
/**
|
|
197
|
+
* @deprecated Renamed to {@link UnreadPolicySource} when the egress union
|
|
198
|
+
* check began reporting the same record; this alias keeps the old name
|
|
199
|
+
* working and will be removed in a later major.
|
|
200
|
+
*/
|
|
201
|
+
export type UnreadIngressPolicySource = UnreadPolicySource;
|
|
202
|
+
/**
|
|
203
|
+
* The named refusal. Distinct from every other refusal this backend can
|
|
204
|
+
* raise on a create path, so a caller (or an operator reading a log line)
|
|
205
|
+
* can tell an unprotected agent port from a slow API server or an
|
|
206
|
+
* unenforceable egress policy without matching on a message.
|
|
207
|
+
*
|
|
208
|
+
* It carries the pod's labels and EVERY policy examined, with a verdict each,
|
|
209
|
+
* because that list is the operator's whole debugging session: the question
|
|
210
|
+
* "why does my policy not count?" is answered by the line that says it did
|
|
211
|
+
* not select these labels.
|
|
212
|
+
*
|
|
213
|
+
* Every sentence of the message is a claim the read actually supports. When a
|
|
214
|
+
* collection could not be enumerated it lands in {@link unread} and the
|
|
215
|
+
* message says so instead of describing a namespace nobody looked at — see
|
|
216
|
+
* {@link UnreadPolicySource}.
|
|
217
|
+
*/
|
|
218
|
+
export declare class KubernetesIngressPolicyError extends Error {
|
|
219
|
+
readonly refusal: IngressPolicyRefusal;
|
|
220
|
+
readonly subject: string;
|
|
221
|
+
readonly podLabels: Readonly<Record<string, string>>;
|
|
222
|
+
readonly agentPort: number;
|
|
223
|
+
readonly examined: readonly ExaminedIngressPolicy[];
|
|
224
|
+
/** Empty on every decision made from policies that WERE read. */
|
|
225
|
+
readonly unread: readonly UnreadPolicySource[];
|
|
226
|
+
readonly name = "KubernetesIngressPolicyError";
|
|
227
|
+
constructor(refusal: IngressPolicyRefusal, subject: string, podLabels: Readonly<Record<string, string>>, agentPort: number, examined: readonly ExaminedIngressPolicy[], summary: string,
|
|
228
|
+
/** Empty on every decision made from policies that WERE read. */
|
|
229
|
+
unread?: readonly UnreadPolicySource[]);
|
|
230
|
+
}
|
|
231
|
+
/**
|
|
232
|
+
* One label set, rendered for a refusal message. Exported for the egress
|
|
233
|
+
* union check's refusal, which has to render the identical thing.
|
|
234
|
+
*/
|
|
235
|
+
export declare function formatLabels(labels: Readonly<Record<string, string>>): string;
|
|
236
|
+
/**
|
|
237
|
+
* A JSON object, and not `null` and not an array.
|
|
238
|
+
*
|
|
239
|
+
* `typeof null === 'object'` and `typeof [] === 'object'` are the two ways a
|
|
240
|
+
* check meaning "is this an object" gets written and stays wrong.
|
|
241
|
+
*/
|
|
242
|
+
export declare function isRecord(value: unknown): value is Record<string, unknown>;
|
|
243
|
+
/**
|
|
244
|
+
* How a field the schema declares as a LIST reads.
|
|
245
|
+
*
|
|
246
|
+
* - `undefined` — absent (`null` included: that is how a serialiser spells
|
|
247
|
+
* absent, and the API server never sends it otherwise). What absent means
|
|
248
|
+
* is the caller's to decide.
|
|
249
|
+
* - the array — present and readable.
|
|
250
|
+
* - `'unreadable'` — present as something that is not a list.
|
|
251
|
+
*/
|
|
252
|
+
export type ReadList = readonly unknown[] | undefined | 'unreadable';
|
|
253
|
+
export declare function readList(value: unknown): ReadList;
|
|
254
|
+
/** A policy's name, or a stable stand-in — never a non-string off the wire. */
|
|
255
|
+
export declare function policyName(item: unknown, index: number): string;
|
|
256
|
+
/**
|
|
257
|
+
* One policy, normalised to the three questions the decision actually asks:
|
|
258
|
+
* does it select this pod, does it enforce ingress on it, and what does it
|
|
259
|
+
* let in. Both resource kinds collapse onto this, so the union rule is
|
|
260
|
+
* implemented once.
|
|
261
|
+
*/
|
|
262
|
+
export interface IngressPolicyDocument {
|
|
263
|
+
readonly kind: 'NetworkPolicy' | 'CiliumNetworkPolicy';
|
|
264
|
+
readonly name: string;
|
|
265
|
+
readonly selects: SelectorMatch;
|
|
266
|
+
/**
|
|
267
|
+
* Does this policy put the pod into ingress DEFAULT-DENY — which is the
|
|
268
|
+
* only thing that makes it count as coverage. A core policy whose
|
|
269
|
+
* `policyTypes` leaves Ingress out does not, and neither does a Cilium
|
|
270
|
+
* rule carrying `enableDefaultDeny.ingress: false`.
|
|
271
|
+
*/
|
|
272
|
+
readonly enforcesIngress: boolean;
|
|
273
|
+
/**
|
|
274
|
+
* Per-rule: does this rule admit a wide-open peer on the agent port.
|
|
275
|
+
*
|
|
276
|
+
* Only rules that APPLY are carried, which is not the same question as
|
|
277
|
+
* {@link enforcesIngress}: a core policy that leaves Ingress out of
|
|
278
|
+
* `policyTypes` has its ingress block ignored by the API server outright
|
|
279
|
+
* and so carries no rules at all, while a Cilium rule that disables
|
|
280
|
+
* default-deny still admits everything it names — it simply cannot be the
|
|
281
|
+
* policy that closes the port.
|
|
282
|
+
*/
|
|
283
|
+
readonly rules: readonly IngressRuleVerdict[];
|
|
284
|
+
/**
|
|
285
|
+
* Set when the OBJECT could not be read — a field the schema declares one
|
|
286
|
+
* way arriving as another. It decides alone: a document carrying it is
|
|
287
|
+
* `not-evaluable` whatever the fields that did parse happen to say,
|
|
288
|
+
* because a policy that cannot be read cannot be shown to close a port.
|
|
289
|
+
*/
|
|
290
|
+
readonly unreadable?: string;
|
|
291
|
+
}
|
|
292
|
+
/** `'unknown'` is never guessed either way — see {@link IngressPolicyRefusal}. */
|
|
293
|
+
export type SelectorMatch = 'yes' | 'no' | 'unknown';
|
|
294
|
+
export interface IngressRuleVerdict {
|
|
295
|
+
readonly open: boolean | 'unknown';
|
|
296
|
+
readonly detail?: string;
|
|
297
|
+
}
|
|
298
|
+
/**
|
|
299
|
+
* Is this a selector this check can read at all?
|
|
300
|
+
*
|
|
301
|
+
* An ABSENT selector is readable — the resource defines it as "everything".
|
|
302
|
+
* A present one that is not an object, or whose `matchLabels` /
|
|
303
|
+
* `matchExpressions` are not the shapes the API declares, is not, and every
|
|
304
|
+
* caller turns that into `'unknown'`. A selector that might match a pod might
|
|
305
|
+
* also be the one holding its port open, so neither "matches" nor "does not
|
|
306
|
+
* match" is available.
|
|
307
|
+
*/
|
|
308
|
+
export declare function selectorIsReadable(selector: unknown): boolean;
|
|
309
|
+
export declare function matchesLabelSelector(selector: unknown, labels: Readonly<Record<string, string>>, normaliseKey?: (key: string) => string | undefined): SelectorMatch;
|
|
310
|
+
/**
|
|
311
|
+
* Strip the label SOURCE prefix off a Cilium selector key, or report that it
|
|
312
|
+
* is one this check cannot map onto a pod label.
|
|
313
|
+
*
|
|
314
|
+
* `k8s:` and `any:` both resolve to the pod's own labels; `reserved:` and the
|
|
315
|
+
* other sources name identities that are not pod labels at all, and guessing
|
|
316
|
+
* at one would be exactly the "trust the shape" mistake this module exists to
|
|
317
|
+
* avoid.
|
|
318
|
+
*/
|
|
319
|
+
export declare function ciliumSelectorKey(key: string): string | undefined;
|
|
320
|
+
/**
|
|
321
|
+
* The label set a Cilium selector is matched against: the pod's own labels
|
|
322
|
+
* plus the namespace, which that CRD's selectors name as
|
|
323
|
+
* `io.kubernetes.pod.namespace` and which every namespaced policy in the
|
|
324
|
+
* shipped examples carries.
|
|
325
|
+
*/
|
|
326
|
+
export declare function ciliumIdentityLabels(podLabels: Readonly<Record<string, string>>, namespace: string): Readonly<Record<string, string>>;
|
|
327
|
+
export declare function corePeerIsWideOpen(peer: unknown): boolean | 'unknown';
|
|
328
|
+
/** Every core `NetworkPolicy` in the list, reduced to {@link IngressPolicyDocument}. */
|
|
329
|
+
export declare function readCoreIngressPolicies(items: readonly unknown[], target: IngressVerificationTarget): IngressPolicyDocument[];
|
|
330
|
+
/** Every `CiliumNetworkPolicy` in the list, reduced the same way. */
|
|
331
|
+
export declare function readCiliumIngressPolicies(items: readonly unknown[], target: IngressVerificationTarget): IngressPolicyDocument[];
|
|
332
|
+
export interface IngressDecision {
|
|
333
|
+
readonly examined: readonly ExaminedIngressPolicy[];
|
|
334
|
+
/** Absent when the port is covered and nothing opens it. */
|
|
335
|
+
readonly refusal?: {
|
|
336
|
+
readonly kind: IngressPolicyRefusal;
|
|
337
|
+
readonly summary: string;
|
|
338
|
+
};
|
|
339
|
+
}
|
|
340
|
+
/**
|
|
341
|
+
* The union rule, applied. Pure — no I/O, no client, no clock — so every
|
|
342
|
+
* shape that has to be refused can be asserted one per test, which is how
|
|
343
|
+
* the "admits any peer" reading stays a rule rather than a heuristic.
|
|
344
|
+
*/
|
|
345
|
+
export declare function decideIngressCoverage(documents: readonly IngressPolicyDocument[], target: IngressVerificationTarget): IngressDecision;
|
|
346
|
+
/**
|
|
347
|
+
* Internal: a collection that could not be enumerated. It carries what the
|
|
348
|
+
* refusal needs and never escapes this module — {@link verifyIngressPolicyApplied}
|
|
349
|
+
* turns it into a {@link KubernetesIngressPolicyError} that also reports
|
|
350
|
+
* whatever WAS read before it.
|
|
351
|
+
*/
|
|
352
|
+
export declare class UnreadPolicyCollection extends Error {
|
|
353
|
+
readonly source: UnreadPolicySource;
|
|
354
|
+
readonly summary: string;
|
|
355
|
+
constructor(source: UnreadPolicySource, summary: string);
|
|
356
|
+
}
|
|
357
|
+
/**
|
|
358
|
+
* Enumerate one policy collection, or report why it could not be read.
|
|
359
|
+
*
|
|
360
|
+
* Exported: `egress-policy.ts`'s union check lists exactly these two
|
|
361
|
+
* collections for exactly this reason, and a second enumerator would be a
|
|
362
|
+
* second answer to "which policies apply to this pod".
|
|
363
|
+
*/
|
|
364
|
+
export declare function listPolicies(client: KubernetesClient, path: string, resource: UnreadPolicySource['resource'], signal?: AbortSignal): Promise<readonly unknown[]>;
|
|
365
|
+
/**
|
|
366
|
+
* Verify-not-trust for ingress: list the namespace's policies, evaluate them
|
|
367
|
+
* against the pod's real labels, and refuse unless the agent port is closed.
|
|
368
|
+
*
|
|
369
|
+
* Called BEFORE the POST on every path that creates a Sandbox, so a refusal
|
|
370
|
+
* leaves no Sandbox and no PVC behind — and, on the claim path, after the
|
|
371
|
+
* bind, where a refusal releases the claim through the acquire path's own
|
|
372
|
+
* cleanup.
|
|
373
|
+
*/
|
|
374
|
+
export declare function verifyIngressPolicyApplied(client: KubernetesClient, target: IngressVerificationTarget, signal?: AbortSignal): Promise<void>;
|
|
375
|
+
//# sourceMappingURL=ingress-policy.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ingress-policy.d.ts","sourceRoot":"","sources":["../../../src/backends/kubernetes/ingress-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkFG;AAEH,OAAO,EAEN,KAAK,gBAAgB,EAErB,MAAM,iBAAiB,CAAA;AAOxB;;;;;;;;;;GAUG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,QAAQ,CAAA;AAEvD;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAChC;IACA,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAA;CACxC,GACD,YAAY,CAAA;AAEf,+EAA+E;AAC/E,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,uBAAuB,GAAG,SAAS,GAAG,OAAO,CAEhG;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,uBAAuB,GAAG,SAAS,EAC5C,YAAY,EAAE,uBAAuB,GAAG,SAAS,GAC/C,uBAAuB,CAKzB;AAED,4EAA4E;AAC5E,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAA;IACxC,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACxB;AAED,0EAA0E;AAC1E,MAAM,MAAM,oBAAoB;AAC/B,+EAA+E;AAC7E,QAAQ;AACV,qEAAqE;GACnE,kBAAkB;AACpB,oDAAoD;GAClD,iBAAiB;AACnB,oFAAoF;GAClF,oBAAoB;AACtB,sFAAsF;GACpF,eAAe,CAAA;AAElB,6CAA6C;AAC7C,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,qBAAqB,CAAA;IACtD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,WAAW,GAAG,eAAe,CAAA;AAEvF;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,GAAG,uBAAuB,CAAA;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,WAAW,CAAA;IACpC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,kBAAkB,CAAA;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IAIrD,QAAQ,CAAC,OAAO,EAAE,oBAAoB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE;IAEnD,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE;IAV/C,SAAkB,IAAI,kCAAiC;gBAG7C,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC3C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,SAAS,qBAAqB,EAAE,EACnD,OAAO,EAAE,MAAM;IACf,iEAAiE;IACxD,MAAM,GAAE,SAAS,kBAAkB,EAAO;CAMpD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAO7E;AA2GD;;;;;GAKG;AAeH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,QAAQ,GAAG,SAAS,OAAO,EAAE,GAAG,SAAS,GAAG,YAAY,CAAA;AAEpE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAGjD;AAED,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAI/D;AAoCD;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,qBAAqB,CAAA;IACtD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;IACjC;;;;;;;;;OASG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,kFAAkF;AAClF,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,IAAI,GAAG,SAAS,CAAA;AAEpD,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAA;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACxB;AAMD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAW7D;AAiCD,wBAAgB,oBAAoB,CACnC,QAAQ,EAAE,OAAO,EACjB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACxC,YAAY,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAwB,GAC9D,aAAa,CAwCf;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMjE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CACnC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC3C,SAAS,EAAE,MAAM,GACf,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAElC;AAyDD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAiCrE;AAqND,wFAAwF;AACxF,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,SAAS,OAAO,EAAE,EACzB,MAAM,EAAE,yBAAyB,GAC/B,qBAAqB,EAAE,CAoCzB;AAED,qEAAqE;AACrE,wBAAgB,yBAAyB,CACxC,KAAK,EAAE,SAAS,OAAO,EAAE,EACzB,MAAM,EAAE,yBAAyB,GAC/B,qBAAqB,EAAE,CAmCzB;AAoDD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAA;IACnD,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE;QAClB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;QACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KACxB,CAAA;CACD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACpC,SAAS,EAAE,SAAS,qBAAqB,EAAE,EAC3C,MAAM,EAAE,yBAAyB,GAC/B,eAAe,CA2GjB;AAMD;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAE/C,QAAQ,CAAC,MAAM,EAAE,kBAAkB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM;gBADf,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,MAAM;CAIzB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CACjC,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC,EACxC,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAmC7B;AAED;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAC/C,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,yBAAyB,EACjC,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAuDf"}
|